Browse CVEs by Ecosystem and Severity
340 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2022-31162
Slack Morphism for Rust before 0.41.0 can leak Slack OAuth client information in application debug logs
HIGH
CVE-2021-41641
Link Following in Deno
HIGH
CVE-2021-3712
Read buffer overruns processing ASN.1 strings
HIGH
CVE-2020-35906
futures_task::waker may cause a use-after-free if used on a type that isn't 'static
HIGH
CVE-2020-35711
Dangling reference in `access::Map` with Constant
HIGH
CVE-2019-16760
Cargo prior to Rust 1.26.0 may download the wrong dependency
HIGH
CVE-2022-1473
Resource leakage when decoding certificates and keys
HIGH
CVE-2022-24791
Use after free in Wasmtime
HIGH
CVE-2022-0778
openssl-src's infinite loop in `BN_mod_sqrt()` reachable when parsing certificates
HIGH
CVE-2022-24713
Rust's regex crate vulnerable to regular expression denial of service
HIGH
CVE-2022-23639
crossbeam-utils Unsoundness of AtomicCell<{i,u}64> arithmetics on 32-bit targets that support Atomic{I,U}64
HIGH
CVE-2018-25023
Use of Uninitialized Resource in smallvec
HIGH
CVE-2019-25054
Missing Initialization of Resource in pnet
HIGH
CVE-2021-45694
Window may read from uninitialized memory locations in rdiff
HIGH
CVE-2021-45699
Allocation of Resources Without Limits or Throttling in ckb
HIGH
CVE-2021-45704
Out-of-bounds Write and Race Condition in metrics-util
HIGH
CVE-2021-45708
Abomonation transmutes &T to and from &[u8] without sufficient constraints
HIGH
CVE-2021-45711
Uncontrolled Resource Consumption in simple_asn1
HIGH
CVE-2021-45710
Race Condition in tokio
HIGH
CVE-2021-4044
Invalid handling of `X509_verify_cert()` internal errors in libssl
HIGH
CVE-2021-43790
Use After Free in lucet
HIGH
CVE-2021-41150
Improper sanitization of delegated role names
HIGH
CVE-2021-41149
Improper sanitization of target names
HIGH
CVE-2021-41153
Specification non-compliance in JUMPI
HIGH
CVE-2021-20319
coreos-installer improperly verifies GPG signature when decompressing gzipped artifact
HIGH
CVE-2021-36753
Uncontrolled Search Path Element in sharkdp/bat
HIGH
CVE-2020-36212
Update unsound DrainFilter and RString::retain
HIGH
CVE-2019-25008
Integer Overflow/Infinite Loop in the http crate
HIGH
CVE-2020-13759
Improper Synchronization and Race Condition in vm-memory
HIGH
CVE-2020-15254
crossbeam-channel Undefined Behavior before v0.4.4
HIGH
CVE-2020-36455
Slock<T> allows sending non-Send types across thread boundaries
HIGH
CVE-2020-36446
Data races in signal-simple
HIGH
CVE-2020-36444
Data races in async-coap
HIGH
CVE-2020-36440
Data races in libsbc
HIGH
CVE-2020-36439
Data races in ticketed_lock
HIGH
CVE-2020-36437
Data race in conqueue
HIGH
CVE-2019-15547
Mishandling of format strings in ncurses
HIGH
CVE-2019-15546
Format string vulnerabilities in pancurses
HIGH
CVE-2021-38511
Links in archive can create arbitrary directories
HIGH
CVE-2020-36436
Data races in unicycle
HIGH
CVE-2020-36458
Data races in lexer
HIGH
CVE-2020-36456
Data races in toolshed
HIGH
CVE-2020-36457
Data races in lever
HIGH
CVE-2020-36454
Data races in parc
HIGH
CVE-2020-36451
Data races in rcu_cell
HIGH
CVE-2020-36447
Data race in v9
HIGH
CVE-2020-15093
Improper verification of signature threshold in tough
HIGH
CVE-2020-26297
XSS in mdBook
HIGH
CVE-2020-36465
Use after free in generic-array
HIGH
CVE-2021-38196
Remote code execution in better-macro