Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-48027KEV | 9.3 critical | 2.0% | nx, nx_console | Nx Console is the user interface for Nx & Lerna. On 19 May 2026, a malicious version of Nx Console, 18.95.0, was published at 12:30 PM UTC and removed soon after at 12:48 PM UTC, leaving it available for ~18 minutes in Visual Studio Marketplace. For OpenVSX, the problem was detected later, and the compromised version was available from 12:33 UTC to 13:09 UTC (~36 minutes). Version 18.100.0 of Nx Console is not compromised and users may remediate by upgrading to that version. | 14 Oct |
| CVE-2017-5645exploit ×2 | 9.8 critical | 89.0% | apache, netapp, log4j, oncommand_api_services, oncommand_insight | In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code. | 8 Oct |
| CVE-2013-7285exploit ×2 | 9.8 critical | 84.0% | oracle, apache, endeca_information_discovery_studio, activemq, xstream | Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. e.g. JSON. | 8 Oct |
| CVE-2025-55315exploit ×8 | 9.9 critical | 67.0% | microsoft, asp.net_core, visual_studio_2022 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network. | 18 Oct |
| CVE-2021-23337exploit | 7.2 high | 21.0% | lodash, oracle, banking_corporate_lending_process_management, banking_credit_facilities_process_management | Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function. | 8 Oct |
| CVE-2021-43891exploit | 7.8 high | 13.0% | microsoft, visual_studio_code | Visual Studio Code Remote Code Execution Vulnerability | 8 Oct |
| CVE-2020-5421exploit | 6.5 medium | 12.0% | vmware, oracle, spring_framework, commerce_guided_search, communications_brm | In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter. | 8 Oct |
| CVE-2022-22971exploit | 6.5 medium | 3.0% | vmware, oracle, spring_framework, financial_services_crime_and_compliance_management_studio, cloud_secure_agent | In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user. | 8 Oct |
| CVE-2021-43908exploit | 4.3 medium | 3.0% | microsoft, visual_studio_code | Visual Studio Code Spoofing Vulnerability | 8 Oct |
| CVE-2019-10219exploit ×2 | 6.1 medium | 2.0% | redhat, netapp, hibernate_validator, fuse, jboss_data_grid | A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack. | 8 Oct |
| CVE-2022-22970exploit | 5.3 medium | 2.0% | vmware, oracle, spring_framework, financial_services_crime_and_compliance_management_studio, active_iq_unified_manager | In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object. | 8 Oct |
| CVE-2025-62222exploit | 8.8 high | 1.0% | microsoft, github_copilot_chat | Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to execute code over a network. | 18 Oct |
| CVE-2019-10086 | 7.3 high | 29.0% | apache, debian, commons_beanutils, nifi, debian_linux | In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean. | 8 Oct |
| CVE-2016-0718 | 9.8 critical | 13.0% | mozilla, apple, firefox, mac_os_x, linux_enterprise_debuginfo | Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow. | 8 Oct |
| CVE-2021-36090 | 7.5 high | 13.0% | apache, oracle, commons_compress, banking_apis, banking_digital_experience | When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip package. | 8 Oct |
| CVE-2022-23437 | 6.5 medium | 12.0% | apache, oracle, xerces-j, agile_engineering_data_management, agile_product_lifecycle_management | There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present within XercesJ version 2.12.1 and the previous versions. | 8 Oct |
| CVE-2021-35517 | 7.5 high | 11.0% | apache, netapp, commons_compress, active_iq_unified_manager, oncommand_insight | When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' tar package. | 8 Oct |
| CVE-2020-13956 | 5.3 medium | 9.0% | apache, quarkus, httpclient, data_integrator | Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution. | 8 Oct |
| CVE-2020-11979 | 7.5 high | 8.0% | apache, gradle, ant, fedora | As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process. | 8 Oct |
| CVE-2021-37714 | 7.5 high | 7.0% | jsoup, quarkus, banking_trade_finance | jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinitely until cancelled), to complete more slowly than usual, or to throw an unexpected exception. This effect may support a denial of service attack. The issue is patched in version 1.14.2. There are a few available workarounds. Users may rate limit input parsing, limit the size of inputs based on system resources, and/or implement thread watchdogs to cap and timeout parse runtimes. | 8 Oct |
| CVE-2020-28500 | 5.3 medium | 7.0% | lodash, oracle, banking_corporate_lending_process_management, banking_credit_facilities_process_management | Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions. | 8 Oct |
| CVE-2021-21409 | 5.9 medium | 5.0% | netty, debian, debian_linux, oncommand_api_services | Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2) before version 4.1.61.Final there is a vulnerability that enables request smuggling. The content-length header is not correctly validated if the request only uses a single Http2HeaderFrame with the endStream set to to true. This could lead to request smuggling if the request is proxied to a remote peer and translated to HTTP/1.1. This is a followup of GHSA-wm47-8v5p-wjpj/CVE-2021-21295 which did miss to fix this one case. This was fixed as part of 4.1.61.Final. | 8 Oct |
| CVE-2026-50649 | 7.8 high | 4.0% | microsoft, .net_framework, .net, visual_studio_2026 | Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally. | Wed 28 Oct |
| CVE-2026-50646 | 7.8 high | 4.0% | microsoft, .net_framework, .net, visual_studio_2022 | Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally. | Wed 28 Oct |
| CVE-2022-21986 | 7.5 high | 4.0% | microsoft, fedoraproject, .net, visual_studio_2019, visual_studio_2022 | .NET Denial of Service Vulnerability | 8 Oct |
| CVE-2019-16168 | 6.5 medium | 4.0% | sqlite, netapp, active_iq_unified_manager, e-series_santricity_os_controller | In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner." | 14 Oct |
| CVE-2020-7712 | 7.2 high | 3.0% | joyent, oracle, json, commerce_guided_search, financial_services_crime_and_compliance_management_studio | This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function. | 8 Oct |
| CVE-2021-43797 | 6.5 medium | 3.0% | netty, quarkus, oncommand_workflow_automation | Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. Netty prior to version 4.1.71.Final skips control chars when they are present at the beginning / end of the header name. It should instead fail fast as these are not allowed by the spec and could lead to HTTP request smuggling. Failing to do the validation might cause netty to "sanitize" header names before it forward these to another remote system when used as proxy. This remote system can't see the invalid usage anymore, and therefore does not do the validation itself. Users should upgrade to version 4.1.71.Final. | 8 Oct |
| CVE-2022-21991 | 8.1 high | 2.0% | microsoft, visual_studio_code | Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability | 8 Oct |
| CVE-2026-32178 | 7.5 high | 2.0% | microsoft, .net, visual_studio_2022 | Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network. | Mon 26 Oct |
| CVE-2026-32203 | 7.5 high | 2.0% | microsoft, .net, visual_studio_2022, visual_studio_2026 | Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network. | Mon 26 Oct |
| CVE-2021-21290 | 5.5 medium | 2.0% | netty, debian, debian_linux, quarkus | Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty before version 4.1.59.Final there is a vulnerability on Unix-like systems involving an insecure temp file. When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set the file/directory permissions can lead to information disclosure. Of note, this does not impact modern MacOS Operating Systems. The method "File.createTempFile" on unix-like systems creates a random file, but, by default will create this file with the permissions "-rw-r--r--". Thus, if sensitive information is written to this file, other local users can read this information. This is the case in netty's "AbstractDiskHttpData" is vulnerable. This has been fixed in version 4.1.59.Final. As a workaround, one may specify your own "java.io.tmpdir" when you start the JVM or use "DefaultHttpDataFactory.setBaseDir(...)" to set the directory to something that is only readable by the current user. | 8 Oct |
| CVE-2025-60213 | 9.8 critical | 1.0% | no CPE yet | Deserialization of Untrusted Data vulnerability in Whitebox-Studio Scape scape allows Object Injection.This issue affects Scape: from n/a through <= 1.5.13. | 8 Oct |
| CVE-2026-81376 | 9.6 critical | 1.0% | microsoft, visual studio code | Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 19 h ago |
| CVE-2026-65669 | 9.6 critical | 1.0% | microsoft, sql server management studio 22 | Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network. | 19 h ago |
| CVE-2026-102238 | 9.6 critical | 1.0% | no CPE yet | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network. | 19 Oct |
| CVE-2026-88092 | 9.4 critical | 1.0% | microsoft, asp.net_core, visual_studio_2022, visual_studio_2026 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network. | 16 Oct |
| CVE-2026-69110 | 9.3 critical | 1.0% | no CPE yet | OpenCode Studio before 2.4.4 contains a missing authentication vulnerability that allows unauthenticated remote attackers to read arbitrary files within the temp and static/music directories by directly accessing the GET /api/tmp/:tmpFile and GET /api/music/:fileName endpoints. Attackers can retrieve intermediate audio, video artifacts, and subtitles belonging to other users' jobs, and additionally delete any video by ID through the unauthenticated DELETE /api/short-video/:videoId endpoint. | 23 Oct |
| CVE-2026-77906 | 8.8 high | 1.0% | microsoft, microsoft visual studio 2026 version 18.9 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | 19 h ago |
| CVE-2026-78462 | 8.8 high | 1.0% | microsoft, visual studio code | Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 19 h ago |
| CVE-2026-71328 | 8.8 high | 1.0% | microsoft, .net 10.0 runtime, .net 11.0 runtime, .net 8.0 runtime | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | 19 h ago |
| CVE-2026-69439 | 8.8 high | 1.0% | microsoft, .net 10.0 runtime, .net 11.0 runtime, .net 8.0 runtime | Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network. | 19 h ago |
| CVE-2026-77907 | 8.8 high | 1.0% | microsoft, microsoft visual studio 2026 version 18.9 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | 19 h ago |
| CVE-2026-69522 | 8.8 high | 1.0% | microsoft, .net 10.0 runtime, .net 11.0 runtime, .net 8.0 runtime | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | 19 h ago |
| CVE-2026-47303 | 8.8 high | 1.0% | microsoft, .net, visual_studio_2022, visual_studio_2026 | Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network. | Wed 28 Oct |
| CVE-2026-47300 | 8.8 high | 1.0% | microsoft, .net, visual_studio_2022, visual_studio_2026 | Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network. | Wed 28 Oct |
| CVE-2026-41109 | 8.8 high | 1.0% | microsoft, visual_studio_code | Improper neutralization of special elements in output used by a downstream component ('injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to bypass a security feature over a network. | Mon 26 Oct |
| CVE-2026-41613 | 8.8 high | 1.0% | microsoft, visual_studio_code | Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network. | Mon 26 Oct |
| CVE-2026-12856 | 8.8 high | 1.0% | redhat, openshift_dev_spaces | A flaw was found in the vscode-java extension, which provides Java language support for Visual Studio Code. The extension incorrectly trusts all Markdown content in JavaDoc hovers, allowing a malicious Java file to include hidden commands. If a user clicks a specially crafted link within a JavaDoc hover popup, an attacker can execute arbitrary VS Code commands, which can lead to full system compromise in trusted workspaces. | Sun 25 Oct |
| CVE-2026-57102 | 8.8 high | 1.0% | microsoft, visual_studio_code | Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | Sat 24 Oct |
50 of 199 · Next
Download these 199 as CSV · subscribe to this list.
EPSS scores: 2026-10-30. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.