Browse CVEs by Ecosystem and Severity
321 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2024-22191
avo vulnerable to stored cross-site scripting (XSS) in key_value field
HIGH
CVE-2024-21632
Omniauth::MicrosoftGraph Account takeover (nOAuth)
HIGH
CVE-2023-50448
Potential CSV export data leak
HIGH
CVE-2024-0241
encoded_id-rails potential DOS vulnerability due to URIs with extremely long encoded IDs
HIGH
CVE-2023-36465
Decidim has broken access control in templates
HIGH
CVE-2023-4785
Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms)
HIGH
CVE-2023-33953
Excessive Iteration in gRPC
HIGH
CVE-2023-38337
rswag vulnerable to arbitrary JSON and YAML file read via directory traversal
HIGH
CVE-2023-34089
Decidim Cross-site Scripting vulnerability in the processes filter
HIGH
CVE-2023-34090
Decidim vulnerable to sensitive data disclosure
HIGH
CVE-2023-1428
gRPC Reachable Assertion issue
HIGH
CVE-2023-36823
Sanitize vulnerable to Cross-site Scripting via insufficient neutralization of `style` element content
HIGH
CVE-2023-32731
Connection confusion in gRPC
HIGH
CVE-2023-31606
RedCloth Regular Expression Denial of Service issue
HIGH
CVE-2023-34102
avo possible unsafe reflection / partial DoS vulnerability
HIGH
CVE-2023-34103
avo vulnerable to Stored XSS (Cross Site Scripting) in html content based fields
HIGH
CVE-2023-1892
sidekiq vulnerable to cross-site scripting
HIGH
CVE-2023-30614
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in Pay
HIGH
CVE-2020-21514
Fluent Fluentd and Fluent-ui use default password
HIGH
CVE-2023-28756
Ruby Time component ReDoS issue
HIGH
CVE-2023-28755
Ruby URI component ReDoS issue
HIGH
CVE-2023-27530
Rack has possible DoS Vulnerability in Multipart MIME parsing
HIGH
CVE-2015-8314
Devise Gem for Ruby Unauthorized Access Using "Remember Me" Cookie
HIGH
GHSA-q95h-cqrv-8jv5
ExifTool vulnerable to arbitrary code execution
HIGH
CVE-2009-4123
jruby-openssl gem for JRuby fails to do proper certificate validation
HIGH
CVE-2022-44566
Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter
HIGH
CVE-2023-22794
SQL Injection Vulnerability via ActiveRecord comments
HIGH
CVE-2022-44570
Denial of service via header parsing in Rack
HIGH
CVE-2022-47318
Code injection in ruby git
HIGH
CVE-2022-46648
ruby-git has potential remote code execution vulnerability
HIGH
CVE-2023-22626
PgHero Allows Information Disclosure Through EXPLAIN Feature
HIGH
CVE-2021-4250
active_attr Improper Resource Shutdown or Release vulnerability
HIGH
CVE-2022-23517
Inefficient Regular Expression Complexity in rails-html-sanitizer
HIGH
CVE-2022-23516
Uncontrolled Recursion in Loofah
HIGH
CVE-2022-23514
Inefficient Regular Expression Complexity in Loofah
HIGH
CVE-2022-23476
Unchecked return value from xmlTextReaderExpand
HIGH
CVE-2022-45442
Sinatra vulnerable to Reflected File Download attack
HIGH
CVE-2021-33621
HTTP response splitting in CGI
HIGH
CVE-2022-39224
arr-pm vulnerable to arbitrary shell execution when extracting or listing files contained in a malicious rpm.
HIGH
CVE-2022-31163
TZInfo relative path traversal vulnerability allows loading of arbitrary files
HIGH
CVE-2022-31115
opensearch-ruby 2.x before 2.0.2 vulnerable to unsafe YAML deserialization
HIGH
CVE-2022-30122
Denial of Service Vulnerability in Rack Multipart Parsing
HIGH
CVE-2021-25970
Camaleon CMS Insufficient Session Expiration vulnerability
HIGH
CVE-2021-30560
Nokogiri has vulnerable dependencies on libxml2 and libxslt
HIGH
CVE-2021-3517
Nokogiri contains libxml Out-of-bounds Write vulnerability
HIGH
CVE-2021-3518
Nokogiri Implements libxml2 version vulnerable to use-after-free
HIGH
CVE-2020-7385
Metasploit Framework user exposes Metasploit to same deserialization issue that is exploited by that module
HIGH
CVE-2020-25613
WEBRick vulnerable to HTTP Request/Response Smuggling
HIGH
CVE-2019-5815
Nokogiri implementation of libxslt vulnerable to heap corruption
HIGH
CVE-2019-12408
Missing Initialization of Resource in Apache Arrow