Browse CVEs by Ecosystem and Severity
5,778 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
CRITICAL
CVE-2022-30599
SQL injection in moodle
HIGH
CVE-2022-50999
Integer Overflow or Wraparound in libxml2 affects Nokogiri
CRITICAL
CVE-2014-4172
Jasig Java CAS Client, .NET CAS Client, and phpCAS contain URL parameter injection vulnerability
HIGH
CVE-2014-3211
Publify vulnerable to DoS attack
MEDIUM
CVE-2014-0084
openshift-origin-node Improper Input Validation vulnerability
HIGH
CVE-2010-1630
phpBB vulnerability related to use of "forum id" in circumstances related to a "global announcement."
HIGH
CVE-2010-3604
powermail extension for TYPO3 vulnerable to SQL Injection
HIGH
CVE-2011-4932
ImpressPages CMS eval injection vulnerability
CRITICAL
CVE-2012-3503
Katello uses hard coded credential
HIGH
CVE-2010-3313
EGroupware Code Injection vulnerability
CRITICAL
CVE-2013-6288
Apache Solr for TYPO3 (solr) extension is vulnerable to Insecure Unserialize
HIGH
CVE-2014-2921
Pimcore Vulnerable to PHP Object Injection Attacks
HIGH
CVE-2014-6289
yag and pt_extbase extensions for TYPO3 allow remote attackers to bypass access restrictions
HIGH
CVE-2014-6295
WEC Map (wec_map) extension for TYPO3 allows SQL Injection
HIGH
CVE-2014-3947
TYPO3 powermail extension has unrestricted file upload vulnerability
CRITICAL
CVE-2015-7695
Zend Framework SQL injection vector using null byte for PDO
CRITICAL
CVE-2016-3082
Remote Code Execution in Apache Struts
HIGH
CVE-2015-8814
Umbraco CMS vulnerable to CSRF
HIGH
CVE-2015-8813
Umbraco CMS vulnerable to CSRF
CRITICAL
CVE-2017-7888
Dolibarr ERP and CRM Insecure Encryption
CRITICAL
CVE-2017-7886
Dolibarr SQL Injection in doli/theme/eldy/style.css.php via the lang parameter
HIGH
CVE-2017-0224
ChakraCore RCE Vulnerability
HIGH
CVE-2017-0235
ChakraCore RCE Vulnerability
CRITICAL
CVE-2017-0252
ChakraCore RCE Vulnerability
CRITICAL
CVE-2017-9436
TeamPass SQL injection in users.queries.php
CRITICAL
CVE-2016-5734
phpMyAdmin Code Injection vulnerability
CRITICAL
CVE-2016-6629
phpMyAdmin Authentication Bypass
CRITICAL
CVE-2016-9866
phpMyAdmin CSRF Vulnerability
CRITICAL
CVE-2017-9246
New Relic .NET Agent contains SQL Injection
CRITICAL
CVE-2017-0223
ChakraCore RCE Vulnerability
HIGH
CVE-2017-0234
ChakraCore RCE Vulnerability
HIGH
CVE-2017-0236
ChakraCore RCE Vulnerability
CRITICAL
CVE-2017-7664
Apache OpenMeetings does not correctly validate uploaded XML documents
CRITICAL
CVE-2016-6798
XML External Entity Reference in Apache Sling
CRITICAL
CVE-2017-9785
Deserialization of Untrusted Data in NancyFX Nancy
CRITICAL
CVE-2017-1000362
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
CRITICAL
CVE-2016-4436
Apache Struts improper action name cleanup
CRITICAL
CVE-2017-2641
Moodle SQL injection via user preferences
CRITICAL
CVE-2017-8658
ChakraCore RCE Vulnerability
HIGH
CVE-2010-4961
Webkit PDFs for TYPO3 has SQL Injection vulnerability
HIGH
CVE-2010-4962
Webkit PDFs for TYPO3 allows remote attackers to execute arbitrary commands
HIGH
CVE-2013-4748
News system (news) extension for TYPO3 vulnerable to SQL Injection
HIGH
CVE-2013-5322
CoolURI extension for TYPO3 vulnerable to SQL Injection
CRITICAL
CVE-2016-3086
Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop
CRITICAL
CVE-2017-14242
Dolibarr SQL injection vulnerability in don/list.php
CRITICAL
CVE-2017-14238
Dolibarr SQL injection vulnerability in admin/menus/edit.php
CRITICAL
CVE-2014-8684
CodeIgniter and Kohana vulnerable to PHP Object Injection
HIGH
CVE-2017-11801
ChakraCore RCE Vulnerability
HIGH
CVE-2017-11797
ChakraCore RCE Vulnerability
HIGH
CVE-2017-11792
ChakraCore RCE Vulnerability