Browse CVEs by Ecosystem and Severity
167 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
CRITICAL
CVE-2023-28445
Deno improperly handles resizable ArrayBuffer
CRITICAL
CVE-2023-26489
wasmtime vulnerable to guest-controlled out-of-bounds read/write on x86_64
CRITICAL
CVE-2022-4203
openssl-src contains Read Buffer Overflow in X.509 Name Constraint
CRITICAL
CVE-2022-45299
webbrowser-rs allows attackers to access arbitrary files via supplying a crafted URL
CRITICAL
CVE-2022-3602
X.509 Email Address 4-byte Buffer Overflow
CRITICAL
GHSA-9q5j-jm53-v7vr
lz4-sys vulnerable to memory corruption via issue in liblz4
CRITICAL
CVE-2022-2274
openssl-src heap memory corruption with RSA private key operation
CRITICAL
CVE-2022-31053
Signature forgery in Biscuit
CRITICAL
GHSA-x4mq-m75f-mx8m
Delegate functions are missing `Send` bound
CRITICAL
GHSA-3jch-9qgp-4844
Generated code can read and write out of bounds in safe code
CRITICAL
CVE-2019-25010
Type confusion if __private_get_type_id__ is overriden
CRITICAL
CVE-2021-3711
SM2 Decryption Buffer Overflow
CRITICAL
CVE-2021-28305
Fix a use-after-free bug in diesels Sqlite backend
CRITICAL
CVE-2021-28031
move_elements can double-free objects on panic
CRITICAL
CVE-2021-28027
Loading a bgzip block can write out of bounds if size overflows.
CRITICAL
CVE-2021-25900
Buffer overflow in SmallVec::insert_many
CRITICAL
CVE-2022-23066
Incorrect Calculation in solana_rbpf
CRITICAL
CVE-2022-27818
Insecure temporary file usage in SWHKD
CRITICAL
CVE-2022-27815
Insecure Temporary File in SWHKD
CRITICAL
CVE-2022-24783
Sandbox bypass leading to arbitrary code execution in Deno
CRITICAL
CVE-2022-24988
Buffer Overflow in galois_2p8
CRITICAL
CVE-2018-25024
Out-of-bounds Write in actix-web
CRITICAL
CVE-2021-45684
Use of Uninitialized Resource in flumedb.
CRITICAL
CVE-2020-36513
Use of Uninitialized Resource in acc_reader.
CRITICAL
CVE-2020-36512
Use of Uninitialized Resource in buffoon.
CRITICAL
CVE-2021-45682
Use of Uninitialized Resource in bronzedb-protocol.
CRITICAL
CVE-2021-45683
Use of Uninitialized Resource in binjs_io.
CRITICAL
CVE-2021-45686
Use of Uninitialized Resource in csv-sniffer.
CRITICAL
CVE-2021-45685
columnar: Read on uninitialized buffer may cause UB (ColumnarReadExt::read_typed_vec())
CRITICAL
CVE-2021-45687
Deserialization of Untrusted Data in rust-cpuid
CRITICAL
CVE-2021-45688
Use of Uninitialized Resource in ash.
CRITICAL
CVE-2021-45690
Use of Uninitialized Resource in messagepack-rs.
CRITICAL
CVE-2021-45689
Use of Uninitialized Resource in gfx-auxil
CRITICAL
CVE-2021-45695
Incorrect reliance on Trait memory layout in mopa
CRITICAL
CVE-2021-45698
RPC call failure in ckb
CRITICAL
CVE-2021-45697
The `total_size` function for partial read the length of any `FixVec` is incorrect in molecule.
CRITICAL
CVE-2021-45696
Incorrect hash in sha2
CRITICAL
CVE-2021-45701
Use After Free in tremor-script
CRITICAL
CVE-2021-45703
Use of Uninitialized Resource in tectonic_xdv
CRITICAL
CVE-2021-45705
Pointer dereference in nanorand
CRITICAL
CVE-2021-45706
Memory flaw in zeroize_derive
CRITICAL
CVE-2021-45709
Use of a Broken or Risky Cryptographic Algorithm in crypto2
CRITICAL
CVE-2021-32619
Deno's static imports inside dynamically imported modules do not adhere to permission checks
CRITICAL
CVE-2021-28034
Drop of uninitialized memory in stack_dst
CRITICAL
CVE-2021-28028
Double free in toodee
CRITICAL
CVE-2021-32810
crossbeam-deque Data Race before v0.7.4 and v0.8.1
CRITICAL
CVE-2020-36432
Use of Uninitialized Resource in alg_ds
CRITICAL
CVE-2020-36443
Use of Uninitialized Resource in libp2p-deflate
CRITICAL
CVE-2020-36434
Double free in sys-info
CRITICAL
CVE-2020-36452
Memory corruption in array-tools