Browse CVEs by Ecosystem and Severity
5,773 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
CRITICAL
CVE-2019-8149
Magento Broken authentication and session managememt
CRITICAL
CVE-2019-7139
Magento 2 Community Edition SQLi Vulnerability
MEDIUM
CVE-2019-1010199
Cross site scripting attack in ServiceStack Framework
HIGH
CVE-2019-1002
ChakraCore RCE via Out-of-bounds write
HIGH
CVE-2019-1051
Chakra Scripting Engine RCE via Out-of-bounds write
HIGH
CVE-2019-1024
Chakra Scripting Engine RCE Vulnerability
HIGH
CVE-2019-1052
Chakra Scripting Engine RCE via Out-of-bounds write
CRITICAL
CVE-2022-29165
Argo CD will blindly trust JWT claims if anonymous access is enabled
CRITICAL
CVE-2021-43350
Apache Traffic Control Traffic Ops Vulnerable to LDAP Injection
HIGH
CVE-2021-42279
Chakra Scripting Engine and ChakraCore Vulnerable to Memory Corruption
MEDIUM
CVE-2021-39880
apollo_upload_server has Denial of Service vulnerability
CRITICAL
CVE-2021-36028
Magento has an XML Injection vulnerability
CRITICAL
CVE-2021-36025
Magento is affected by an improper input validation vulnerability while saving a customer's details
CRITICAL
CVE-2021-36040
Magento has a file extension restrictions bypass
CRITICAL
CVE-2021-36042
Magento executes code via the API File Option Upload Extension
CRITICAL
CVE-2021-3711
SM2 Decryption Buffer Overflow
HIGH
CVE-2021-3712
Read buffer overruns processing ASN.1 strings
HIGH
CVE-2021-30560
Nokogiri has vulnerable dependencies on libxml2 and libxslt
CRITICAL
CVE-2020-21808
NukeViet SQL Injection vulnerability via topicsid parameter
CRITICAL
CVE-2020-21809
NukeViet SQL Injection vulnerability
MEDIUM
CVE-2021-35440
Smashing Cross-site Scripting vulnerability
HIGH
CVE-2020-13663
Drupal Core Cross-Site Request Forgery (CSRF) vulnerability
HIGH
CVE-2021-3517
Nokogiri contains libxml Out-of-bounds Write vulnerability
HIGH
CVE-2021-3518
Nokogiri Implements libxml2 version vulnerable to use-after-free
MEDIUM
CVE-2021-3537
Nokogiri Implements libxml2 version vulnerable to null pointer dereferencing
CRITICAL
CVE-2020-13665
Drupal Core Access bypass vulnerability
HIGH
CVE-2020-13664
Drupal Core Arbitrary PHP code execution vulnerability
HIGH
CVE-2020-7385
Metasploit Framework user exposes Metasploit to same deserialization issue that is exploited by that module
CRITICAL
CVE-2021-28305
Fix a use-after-free bug in diesels Sqlite backend
CRITICAL
CVE-2021-28031
move_elements can double-free objects on panic
CRITICAL
CVE-2021-28027
Loading a bgzip block can write out of bounds if size overflows.
CRITICAL
CVE-2020-24913
qcubed SQL injection vulnerability in profile.php via the strQuery parameter
CRITICAL
CVE-2021-3197
SaltStack Salt is vulnerable to shell injection via ProxyCommand argument
CRITICAL
CVE-2021-3148
SaltStack Salt command injection in the Salt-API when using the Salt-SSH client
CRITICAL
CVE-2021-3144
SaltStack Salt eauth tokens can be used once after expiration
HIGH
CVE-2021-25282
SaltStack Salt Directory Traversal vulnerability
CRITICAL
CVE-2021-25283
SaltStack Salt Server Side Template Injection
CRITICAL
CVE-2021-25281
SaltStack Salt Improper Authentication vulnerability
CRITICAL
CVE-2021-24112
.NET Core Remote Code Execution Vulnerability
MEDIUM
CVE-2021-1721
Denial of service in .NET core
CRITICAL
CVE-2021-25900
Buffer overflow in SmallVec::insert_many
CRITICAL
CVE-2020-23653
ThinkAdmin insecure unserialize vulnerability
HIGH
CVE-2021-1723
ASP.NET Core and Visual Studio Denial of Service Vulnerability
HIGH
CVE-2020-35906
futures_task::waker may cause a use-after-free if used on a type that isn't 'static
HIGH
CVE-2020-35711
Dangling reference in `access::Map` with Constant
CRITICAL
CVE-2020-20136
QuantConnect Lean vulnerable to insecure deserialization
CRITICAL
CVE-2020-25592
SaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi
CRITICAL
CVE-2020-16846KEV
SaltStack Salt Command Injection in netapi ssh client
CRITICAL
CVE-2020-2300
Improper Authentication (empty password) in Jenkins Active Directory Plugin
CRITICAL
CVE-2020-2301
Authentication cache in Active Directory Jenkins Plugin allows logging in with any password