Browse CVEs by Ecosystem and Severity
626 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2024-58366
Externally Controlled Format String in Scripting Functions
MEDIUM
CVE-2024-58365
Uncaught Exception in Macro Expecting Native Function to Exist
MEDIUM
CVE-2024-58364
Uncaught Exception Handling Parsing Errors on Line Terminators
MEDIUM
CVE-2024-21491
svix vulnerable to Authentication Bypass
HIGH
CVE-2024-58264
serde-json-wasm stack overflow during recursive JSON parsing
HIGH
CVE-2024-25817
eza Potential Heap Overflow Vulnerability for AArch64
MEDIUM
CVE-2021-29511
Memory over-allocation in evm crate
HIGH
CVE-2024-23649
Any authenticated user may obtain private message details from other users on the same instance
MEDIUM
CVE-2024-23644
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') in trillium-http and trillium-client
HIGH
CVE-2024-58368
Uncaught Exception processing HTTP Headers in SurrealDB
MEDIUM
CVE-2024-21670
CL-Signatures Revocation Scheme in Ursa has flaws that allow a holder to demonstrate non-revocation of a revoked credential
MEDIUM
CVE-2024-22192
Ursa CL-Signatures Revocation allows verifiers to generate unique identifiers for holders
HIGH
CVE-2023-54366
SurrealDB: Full Table Permissions by Default
HIGH
CVE-2023-51661
Wasmer filesystem sandbox not enforced
HIGH
CVE-2023-6245
Candid infinite decoding loop through specially crafted payload
MEDIUM
CVE-2023-26154
pubnub Insufficient Entropy vulnerability
HIGH
CVE-2023-46115
Tauri's Updater Private Keys Possibly Leaked via Vite Environment Variables
HIGH
CVE-2023-46277
Pleaser privilege escalation vulnerability
HIGH
CVE-2023-45812
Apollo Router vulnerable to Improper Check or Handling of Exceptional Conditions
MEDIUM
CVE-2024-43806
rustix's `rustix::fs::Dir` iterator with the `linux_raw` backend can cause memory explosion
HIGH
CVE-2023-42805
Denial of Service issue in quinn-proto
HIGH
CVE-2023-42444
phonenumber panics on parsing crafted RFC3966 inputs
HIGH
CVE-2023-42447
blurhash panics on parsing crafted inputs
CRITICAL
CVE-2023-42454
SQLpage vulnerable to public exposure of database credentials
HIGH
CVE-2023-43669
Tungstenite allows remote attackers to cause a denial of service
CRITICAL
CVE-2023-39916
NLnet Labs’ Routinator vulnerable to path traversal
HIGH
CVE-2023-39914
BER/CER/DER decoder panics on invalid input
HIGH
CVE-2023-4863
libwebp: OOB write in BuildHuffmanTable
HIGH
CVE-2023-40274
zola Path Traversal vulnerability
HIGH
CVE-2023-4241
lol-html panics on certain HTML inputs
HIGH
CVE-2023-38497
Cargo not respecting umask when extracting crate archives
HIGH
CVE-2023-38688
twitch-tui's connection is not encrypted
HIGH
CVE-2023-34411
xml-rs vulnerable to denial of service via invalid token in XML document
HIGH
CVE-2023-33966
Missing "--allow-net" permission check for built-in Node modules
HIGH
CVE-2023-1521
sccache vulnerable to privilege escalation if server is run as root
HIGH
CVE-2023-33192
Improper handling of NTS cookie length that could crash the ntpd-rs server
MEDIUM
CVE-2023-30610
AWS SDK for Rust will log AWS credentials when TRACE-level logging is enabled for request sending
HIGH
CVE-2023-28446
Interactive `run` permission prompt spoofing via improper ANSI neutralization
CRITICAL
CVE-2023-28445
Deno improperly handles resizable ArrayBuffer
HIGH
CVE-2023-28431
Frontier's modexp precompile is slow for even modulus
CRITICAL
CVE-2023-26489
wasmtime vulnerable to guest-controlled out-of-bounds read/write on x86_64
HIGH
CVE-2023-0215
openssl-src vulnerable to Use-after-free following `BIO_new_NDEF`
CRITICAL
CVE-2022-4203
openssl-src contains Read Buffer Overflow in X.509 Name Constraint
HIGH
CVE-2023-0216
openssl-src subject to Invalid pointer dereference in `d2i_PKCS7` functions
HIGH
CVE-2022-4450
openssl-src contains Double free after calling `PEM_read_bio_ex`
HIGH
CVE-2023-0217
openssl-src subject to NULL dereference validating DSA public key
HIGH
CVE-2023-0401
openssl-src contains `NULL` dereference during PKCS7 data verification
HIGH
CVE-2023-0286
Vulnerable OpenSSL included in cryptography wheels
MEDIUM
CVE-2023-22742
git2-rs fails to verify SSH keys by default
HIGH
CVE-2023-22499
Deno is vulnerable to race condition via interactive permission prompt spoofing