Browse CVEs by Ecosystem and Severity
5,778 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2017-11821
ChakraCore RCE Vulnerability
HIGH
CVE-2017-11796
ChakraCore RCE Vulnerability
HIGH
CVE-2017-11807
ChakraCore RCE Vulnerability
HIGH
CVE-2017-11806
ChakraCore RCE Vulnerability
HIGH
CVE-2017-11805
ChakraCore RCE Vulnerability
CRITICAL
CVE-2016-10074
Swift Mailer mail transport Command Injection
CRITICAL
CVE-2012-4449
Use of a Broken or Risky Cryptographic Algorithm in Apache Hadoop
CRITICAL
CVE-2015-3933
MetalGenix GeniXCMS vulnerable to SQL Injection
HIGH
CVE-2017-11870
Chakra Core vulnerable to privilege escalation when writing to JavaScript null scope objects
HIGH
CVE-2017-11862
Chakra Core vulnerable to privilege escalation due to type confusion
HIGH
CVE-2017-11871
Chakra Core vulnerable to privilege escalation due to reading an invalid pointer
HIGH
CVE-2017-8585
Improper Input Validation in Microsoft.NETCore.App
CRITICAL
CVE-2017-8045
Deserialization of Untrusted Data in Spring AMQP
HIGH
CVE-2017-11910
ChakraCore vulnerable to remote code execution due to insufficient InlineCache check
HIGH
CVE-2017-11916
ChakraCore RCE Vulnerability
HIGH
CVE-2017-11908
ChakraCore RCE Vulnerability
MEDIUM
CVE-2022-0574
Publify Incorrect Authorization
MEDIUM
CVE-2022-0578
Publify vulnerable to code injection
CRITICAL
CVE-2021-33318
Improper Input Validation in IpMatcher
CRITICAL
CVE-2022-24817
Improper kubeconfig validation allows arbitrary code execution
HIGH
CVE-2017-11905
ChakraCore RCE Vulnerability
HIGH
CVE-2017-11889
ChakraCore RCE Vulnerability
CRITICAL
CVE-2016-0788
Jenkins allows Execution of Code by Opening a JRMP Listener
CRITICAL
CVE-2017-17897
Dolibarr SQL injection vulnerability in comm/multiprix.php
CRITICAL
CVE-2017-17900
Dolibarr SQL injection vulnerability in fourn/index.php
CRITICAL
CVE-2017-17899
Dolibarr SQL injection vulnerability in adherents/subscription/info.php
HIGH
CVE-2014-4995
VladTheEnterprising allows local users to obtain sensitive information by reading MySQL root password from temporary file
HIGH
CVE-2014-4991
codders-dataset Process Table Local Plaintext Credential Disclosure
HIGH
CVE-2014-4993
backup-agoddard and backup_checksum have Information Exposure vulnerability
MEDIUM
CVE-2014-4996
VladTheEnterprising allows local users to write to arbitrary files via a symlink attack
HIGH
CVE-2014-4999
kajam allows local users to obtain sensitive information by listing the process
HIGH
CVE-2014-4997
point-cli allows local users to obtain sensitive information by listing the process
HIGH
CVE-2014-4998
lean-ruport allows local users to obtain sensitive information by listing the process
HIGH
CVE-2017-11879
Open redirect in ASP.NET Core
HIGH
CVE-2014-1835
Echor Ruby Gem credentials can be stolen via process table monitoring
HIGH
CVE-2014-1834
Echor contains Command Injection
CRITICAL
CVE-2018-8073
yii2-redis Potential Remote code execution
CRITICAL
CVE-2018-9057
HashiCorp Terraform Amazon Web Services (AWS) uses an insecure PRNG
CRITICAL
CVE-2018-10225
thinkphp SQL Injection via the index.php s parameter
CRITICAL
CVE-2017-12868
SimpleSAMLphp Session fixation issue and authentication bypass in the authcrypt module
CRITICAL
CVE-2018-11407
Symfony Authentication Bypass
CRITICAL
CVE-2016-2403
Symfony Authentication Bypass
CRITICAL
CVE-2018-12071
CodeIgniter Session Fixation Vulnerability
CRITICAL
CVE-2018-13448
Dolibarr SQL injection vulnerability in product/card.php
CRITICAL
CVE-2018-13447
Dolibarr SQL injection vulnerability in product/card.php
MEDIUM
CVE-2014-0013
Ember.js Cross-site Scripting vulnerability
MEDIUM
CVE-2018-0499
xapian-core Cross-site Scripting vulnerability
CRITICAL
CVE-2018-11587
Centreon RCE Vulnerability
CRITICAL
CVE-2018-13450
Dolibarr SQL injection vulnerability in product/card.php
CRITICAL
CVE-2018-13449
Dolibarr SQL injection vulnerability in product/card.php