Browse CVEs by Ecosystem and Severity
340 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2021-29932
Uncontrolled Resource Consumption in parse_duration
HIGH
CVE-2021-26953
Read on uninitialized buffer in postscript
HIGH
CVE-2021-28036
quinn invalidly assumes the memory layout of std::net::SocketAddr
HIGH
CVE-2021-28030
Use of Uninitialized Resource in truetype
HIGH
CVE-2020-36210
Free of uninitialized memory in autorand
HIGH
CVE-2020-35882
Data races in rocket
HIGH
CVE-2020-35865
os_str_bytes relies on undefined behavior of `char::from_u32_unchecked`
HIGH
CVE-2020-35874
Use after free in internment
HIGH
CVE-2019-25003
libsecp256k1 contains side-channel timing attack
HIGH
CVE-2019-25006
Incorrect implementation of the Streebog hash functions in streebog
HIGH
CVE-2020-25791
Array size is not checked in sized-chunks
HIGH
CVE-2020-25791
Array size is not checked in sized-chunks
HIGH
CVE-2019-16137
Wrong memory orderings violates mutual exclusion in spin
HIGH
CVE-2019-15545
Failure to properly verify ed25519 signatures in libp2p-core
HIGH
CVE-2019-15544
Uncontrolled memory consumption in protobuf
HIGH
CVE-2019-15553
Exposure of uninitialized memory in memoffset
HIGH
CVE-2018-20994
Uncontrolled recursion in trust-dns-proto
HIGH
CVE-2016-10931
Improper Certificate Validation in openssl
HIGH
CVE-2021-32629
Memory access due to code generation flaw in Cranelift module
HIGH
CVE-2021-21299
Multiple Transfer-Encoding headers misinterprets request payload
HIGH
CVE-2020-36463
Queues allow non-Send types to be sent to other threads, allowing data races
HIGH
CVE-2020-36208
conquer-once's OnceCell lacks Send bound for its Sync trait.
HIGH
CVE-2020-36449
ShmWriter allows sending non-Send type across threads
HIGH
CVE-2020-36461
MvccRwLock allows data races & aliasing violations
HIGH
CVE-2020-36438
Future<T> lacks bounds on Send and Sync.
HIGH
CVE-2020-36462
Send bound needed on T (for Send impl of `Bucket2`)
HIGH
CVE-2020-36445
convec::ConVec<T> unconditionally implements Send/Sync
HIGH
CVE-2020-36448
Cache<K>: Send/Sync impls needs trait bounds on `K`
HIGH
CVE-2020-36435
Singleton lacks bounds on Send and Sync.
HIGH
CVE-2020-36453
Queue<T> should have a Send bound on its Send/Sync traits
HIGH
CVE-2020-36450
Bunch<T> unconditionally implements Send/Sync
HIGH
CVE-2020-36441
AtomicBox<T> implements Send/Sync for any `T: Sized`
HIGH
CVE-2020-36442
beef::Cow lacks a Sync bound on its Send trait allowing for data races
HIGH
CVE-2020-35889
Misbehaving `HandleLike` implementation can lead to memory safety violation
HIGH
CVE-2019-15542
Uncontrolled recursion leads to abort in HTML serialization
HIGH
CVE-2018-20999
Flaw in streaming state reset() functions can create incorrect results.
HIGH
CVE-2018-20993
Uncontrolled recursion leads to abort in deserialization
HIGH
CVE-2018-20990
Links in archives can overwrite any existing file
HIGH
CVE-2018-20989
An integer underflow could lead to panic
HIGH
CVE-2017-18589
Large cookie Max-Age values can cause a denial of service