Browse CVEs by Ecosystem and Severity
5,773 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
CRITICAL
CVE-2020-2299
Improper Authentication in Jenkins Active Directory Plugin
CRITICAL
CVE-2020-26935
phpMyAdmin SQL injection vulnerability
HIGH
CVE-2020-25613
WEBRick vulnerable to HTTP Request/Response Smuggling
CRITICAL
CVE-2020-2279
Sandbox bypass vulnerability in Jenkins Script Security Plugin
MEDIUM
CVE-2020-8927
Integer overflow in the bundled Brotli C library
HIGH
CVE-2020-1045
Cookie parsing failure
HIGH
CVE-2020-1597
ASP.NET Core Denial of Service Vulnerability
CRITICAL
CVE-2020-9691
Magento DOM-based Cross-site scripting vulnerability
CRITICAL
CVE-2020-15391
DevSpace vulnerable to remote code execution
CRITICAL
CVE-2020-9664
Magento php object injection vulnerability
HIGH
CVE-2020-1147KEV
.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability
CRITICAL
CVE-2020-9630
Magento business logic error vulnerability
CRITICAL
CVE-2020-9632
Magento security mitigation bypass vulnerability
CRITICAL
CVE-2020-9631
Magento security mitigation bypass vulnerability
CRITICAL
CVE-2020-9585
Magento Defense-in-depth security mitigation vulnerability
CRITICAL
CVE-2020-9582
Magento command injection vulnerability
CRITICAL
CVE-2020-9583
Magento command injection vulnerability
CRITICAL
CVE-2020-9576
Magento command injection vulnerability
CRITICAL
CVE-2020-9578
Magento command injection vulnerability
CRITICAL
CVE-2020-9580
Magento Security mitigation bypass vulnerability
CRITICAL
CVE-2020-9579
Magento Security mitigation bypass vulnerability
MEDIUM
CVE-2020-15015
GleamTech FileUltimate Cross-site Scripting
CRITICAL
CVE-2017-18915
Mattermost Server server restarts may provide attackers with API access
CRITICAL
CVE-2017-18908
Mattermost Server password reset email requests can be sent to attacker-provided email addresses
CRITICAL
CVE-2017-18900
Mattermost Server is vulnerable CSV Injection
CRITICAL
CVE-2017-18888
Mattermost Server is vulnerable to SQL Injection when executing multiple POST requests
CRITICAL
CVE-2017-18885
Mattermost Server allows attackers to gain privileges by accessing unintended API endpoints with users' credentials
HIGH
CVE-2020-1073
ChakraCore RCE Vulnerability
CRITICAL
CVE-2020-13693
bbPress unauthenticated privilege-escalation
HIGH
CVE-2020-1161
ASP.NET Core Denial of Service Vulnerability
HIGH
CVE-2020-1108
.NET Core & .NET Framework Denial of Service Vulnerability
HIGH
CVE-2020-1065
ChakraCore RCE Vulnerability
HIGH
CVE-2020-1037
ChakraCore Remote Code Execution Vulnerability
HIGH
CVE-2020-0970
ChakraCore Remote Code Execution Vulnerability
HIGH
CVE-2020-0969
ChakraCore RCE Vulnerability
CRITICAL
CVE-2019-20627
AutoUpdater.NET allows XXE
CRITICAL
CVE-2020-10806
eZ Publish Kernel and Legacy Unrestricted Upload of File with Dangerous Type
HIGH
CVE-2020-9471
Umbraco CMS Authenticated File Upload
CRITICAL
CVE-2019-19212
Dolibarr Cross-site Scripting via the qty parameter in product/fournisseurs.php
HIGH
CVE-2020-0812
ChakraCore RCE Vulnerability
HIGH
CVE-2020-0811
ChakraCore RCE Vulnerability
CRITICAL
CVE-2020-5203
Fat-Free Framework arbitrary code execution
CRITICAL
CVE-2020-9757
SEOmatic for CraftCMS allows Server-Side Template Injection
HIGH
CVE-2020-5187
DNN Path Traversal via Zip Slip
HIGH
CVE-2020-0767
ChakraCore RCE Vulnerability
HIGH
CVE-2020-0711
ChakraCore RCE Vulnerability
HIGH
CVE-2020-0710
ChakraCore RCE Vulnerability
HIGH
CVE-2020-0713
ChakraCore RCE Vulnerability
HIGH
CVE-2020-0712
ChakraCore RCE Vulnerability
CRITICAL
CVE-2019-17268
omniauth-weibo-oauth2 included a code-execution backdoor inserted by a third party