Browse CVEs by Ecosystem and Severity
744 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2022-29498
SQL injection in blazer
CRITICAL
CVE-2022-25648
Command injection in ruby-git
HIGH
CVE-2022-24836
Nokogiri Inefficient Regular Expression Complexity
HIGH
CVE-2022-24440
Command injection in cocoapods-downloader
HIGH
CVE-2022-21223
Command injection in cocoapods-downloader
CRITICAL
CVE-2022-24803
Command Injection vulnerability in asciidoctor-include-ext
CRITICAL
CVE-2022-24790
Puma vulnerable to HTTP Request Smuggling
HIGH
CVE-2018-25032
Nokogiri affected by zlib's Out-of-bounds Write vulnerability
HIGH
CVE-2022-0759
Improper Certificate Validation in kubeclient
HIGH
CVE-2021-3589
Missing Authentication for Critical Function in Foreman Ansible
CRITICAL
CVE-2022-21831
Possible code injection vulnerability in Rails / Active Storage
HIGH
CVE-2024-22051
Integer overflow in cmark-gfm table parsing extension leads to heap memory corruption
HIGH
CVE-2022-24722
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in view_component
CRITICAL
CVE-2022-24720
Remote shell execution vulnerability in image_processing
HIGH
CVE-2022-23634
Puma used with Rails may lead to Information Exposure
HIGH
CVE-2022-23633
Exposure of information in Action Pack
HIGH
CVE-2022-0524
Publify Business Logic Errors
HIGH
CVE-2022-23837
Denial of service in sidekiq
HIGH
CVE-2021-41819
Cookie Prefix Spoofing in CGI::Cookie.parse
HIGH
CVE-2021-22569
A potential Denial of Service issue in protobuf-java
MEDIUM
CVE-2020-28500EPSS 0.2%
Regular Expression Denial of Service (ReDoS) in lodash
MEDIUM
CVE-2021-43846
CSRF forgery protection bypass in solidus_frontend
CRITICAL
CVE-2021-41816
Buffer overrun in CGI.escape_html
MEDIUM
CVE-2021-44528
actionpack Open Redirect in Host Authorization Middleware
HIGH
CVE-2021-28680
Improper Privilege Management in devise_masquerade
MEDIUM
CVE-2021-43809
Local Code Execution through Argument Injection via dash leading git url parameter in Gemfile.
HIGH
CVE-2021-43805
ReDos vulnerability on guest checkout email validation
MEDIUM
CVE-2021-27025
Silent Configuration Failure in Puppet Agent
MEDIUM
CVE-2021-27023
Unsafe HTTP Redirect in Puppet Agent and Puppet Server
CRITICAL
CVE-2021-41275
Spree Auth Devise vulnerability allows for authentication bypass through CSRF weakness
CRITICAL
GHSA-5629-8855-gf4g
Authentication Bypass by CSRF Weakness
CRITICAL
CVE-2021-41274
Authentication Bypass by CSRF Weakness
HIGH
CVE-2021-41817
Regular expression denial of service vulnerability (ReDoS) in date
MEDIUM
CVE-2021-41263
Rails Multisite secure/signed cookies share secrets between sites in a multi-site application
MEDIUM
CVE-2021-25973
Publify `guest` role users can self-register even when the admin does not allow it
MEDIUM
CVE-2021-41183
XSS in `*Text` options of the Datepicker widget in jquery-ui
MEDIUM
CVE-2021-41184
XSS in the `of` option of the `.position()` util in jquery-ui
MEDIUM
CVE-2021-41182
XSS in the `altField` option of the Datepicker widget in jquery-ui
CRITICAL
CVE-2013-2512
OS Command Injection in ftpd
CRITICAL
CVE-2021-33575
Remote code execution in ruby-jss
HIGH
CVE-2021-41098
Improper Restriction of XML External Entity Reference (XXE) in Nokogiri on JRuby
HIGH
CVE-2021-23435
Clearance Gem Open Redirect Vulnerability
MEDIUM
CVE-2021-39197
Older releases of better_errors open to Cross-Site Request Forgery attack
HIGH
CVE-2021-31799
Arbitrary Code Execution in Rdoc
MEDIUM
CVE-2021-28833
qiita-markdown Cross-site Scripting vulnerability
HIGH
CVE-2021-32740
Regular Expression Denial of Service in Addressable templates
HIGH
CVE-2021-35514
Code injection in Narou
HIGH
CVE-2021-20259
Exposure of Sensitive Information to an Unauthorized Actor in foreman_fog_proxmox
CRITICAL
CVE-2021-33564
Dragonfly contains remote code execution vulnerability
HIGH
CVE-2020-7671
HTTP Request Smuggling in goliath