Browse CVEs by Ecosystem and Severity
626 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
CRITICAL
CVE-2022-24988
Buffer Overflow in galois_2p8
HIGH
CVE-2018-25023
Use of Uninitialized Resource in smallvec
CRITICAL
CVE-2018-25024
Out-of-bounds Write in actix-web
CRITICAL
CVE-2021-45684
Use of Uninitialized Resource in flumedb.
HIGH
CVE-2019-25054
Missing Initialization of Resource in pnet
CRITICAL
CVE-2020-36513
Use of Uninitialized Resource in acc_reader.
CRITICAL
CVE-2020-36512
Use of Uninitialized Resource in buffoon.
CRITICAL
CVE-2021-45682
Use of Uninitialized Resource in bronzedb-protocol.
CRITICAL
CVE-2021-45683
Use of Uninitialized Resource in binjs_io.
HIGH
CVE-2021-45694
Window may read from uninitialized memory locations in rdiff
CRITICAL
CVE-2021-45686
Use of Uninitialized Resource in csv-sniffer.
CRITICAL
CVE-2021-45685
columnar: Read on uninitialized buffer may cause UB (ColumnarReadExt::read_typed_vec())
CRITICAL
CVE-2021-45687
Deserialization of Untrusted Data in rust-cpuid
CRITICAL
CVE-2021-45688
Use of Uninitialized Resource in ash.
CRITICAL
CVE-2021-45690
Use of Uninitialized Resource in messagepack-rs.
CRITICAL
CVE-2021-45689
Use of Uninitialized Resource in gfx-auxil
CRITICAL
CVE-2021-45695
Incorrect reliance on Trait memory layout in mopa
CRITICAL
CVE-2021-45698
RPC call failure in ckb
CRITICAL
CVE-2021-45697
The `total_size` function for partial read the length of any `FixVec` is incorrect in molecule.
CRITICAL
CVE-2021-45696
Incorrect hash in sha2
CRITICAL
CVE-2021-45701
Use After Free in tremor-script
HIGH
CVE-2021-45699
Allocation of Resources Without Limits or Throttling in ckb
CRITICAL
CVE-2021-45703
Use of Uninitialized Resource in tectonic_xdv
CRITICAL
CVE-2021-45705
Pointer dereference in nanorand
HIGH
CVE-2021-45704
Out-of-bounds Write and Race Condition in metrics-util
CRITICAL
CVE-2021-45706
Memory flaw in zeroize_derive
HIGH
CVE-2021-45708
Abomonation transmutes &T to and from &[u8] without sufficient constraints
HIGH
CVE-2021-45711
Uncontrolled Resource Consumption in simple_asn1
CRITICAL
CVE-2021-45709
Use of a Broken or Risky Cryptographic Algorithm in crypto2
HIGH
CVE-2021-45710
Race Condition in tokio
HIGH
CVE-2021-4044
Invalid handling of `X509_verify_cert()` internal errors in libssl
HIGH
CVE-2021-43790
Use After Free in lucet
HIGH
CVE-2021-41150
Improper sanitization of delegated role names
HIGH
CVE-2021-41149
Improper sanitization of target names
HIGH
CVE-2021-41153
Specification non-compliance in JUMPI
HIGH
CVE-2021-20319
coreos-installer improperly verifies GPG signature when decompressing gzipped artifact
CRITICAL
CVE-2021-32619
Deno's static imports inside dynamically imported modules do not adhere to permission checks
CRITICAL
CVE-2021-28034
Drop of uninitialized memory in stack_dst
CRITICAL
CVE-2021-28028
Double free in toodee
HIGH
CVE-2021-36753
Uncontrolled Search Path Element in sharkdp/bat
HIGH
CVE-2020-36212
Update unsound DrainFilter and RString::retain
HIGH
CVE-2019-25008
Integer Overflow/Infinite Loop in the http crate
HIGH
CVE-2020-13759
Improper Synchronization and Race Condition in vm-memory
CRITICAL
CVE-2021-32810
crossbeam-deque Data Race before v0.7.4 and v0.8.1
HIGH
CVE-2020-15254
crossbeam-channel Undefined Behavior before v0.4.4
HIGH
CVE-2020-36455
Slock<T> allows sending non-Send types across thread boundaries
CRITICAL
CVE-2020-36432
Use of Uninitialized Resource in alg_ds
HIGH
CVE-2020-36446
Data races in signal-simple
HIGH
CVE-2020-36444
Data races in async-coap
CRITICAL
CVE-2020-36443
Use of Uninitialized Resource in libp2p-deflate