Browse CVEs by Ecosystem and Severity
324 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2024-39943
rejetto HFS vulnerable to OS Command Execution by remote authenticated users
HIGH
CVE-2024-38999
jrburke requirejs vulnerable to prototype pollution
HIGH
CVE-2024-38996
Prototype pollution in ag-grid-community via the _.mergeDeep function
HIGH
CVE-2024-32866
Conform contains a Prototype Pollution Vulnerability in `parseWith...` function
HIGH
CVE-2024-28181
TurboBoost Commands vulnerable to arbitrary method invocation
HIGH
CVE-2024-28121
StimulusReflex arbitrary method call
HIGH
CVE-2023-46115
Tauri's Updater Private Keys Possibly Leaked via Vite Environment Variables
HIGH
CVE-2023-4863
libwebp: OOB write in BuildHuffmanTable
HIGH
CVE-2023-26134
git-commit-info vulnerable to Command Injection
HIGH
CVE-2022-31129
Moment.js vulnerable to Inefficient Regular Expression Complexity
HIGH
CVE-2022-24785
Path Traversal: 'dir/../../filename' in moment.locale
HIGH
CVE-2022-0235EPSS 0.6%
node-fetch forwards secure headers to untrusted sites
HIGH
CVE-2021-3749EPSS 1.5%
axios Inefficient Regular Expression Complexity vulnerability
HIGH
CVE-2021-37701EPSS 0.0%
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
HIGH
CVE-2021-37712EPSS 0.0%
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
HIGH
CVE-2021-37713EPSS 0.6%
Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization
HIGH
CVE-2021-32804EPSS 85.0%
Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization
HIGH
CVE-2021-32803EPSS 0.1%
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning
HIGH
CVE-2020-28469EPSS 0.3%
glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex
HIGH
CVE-2021-23337EPSS 0.7%
Command Injection in lodash
HIGH
CVE-2021-21252
Regular Expression Denial of Service in jquery-validation
HIGH
CVE-2020-8203
Prototype Pollution in lodash
HIGH
CVE-2019-18841
Prototype Pollution in chartkick
HIGH
CVE-2016-10707
Denial of Service in jquery