Browse CVEs by Ecosystem and Severity
321 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2019-12410
Missing Initialization of Resource in Apache Arrow
HIGH
CVE-2019-18197
Nokogiri affected by libxslt Use of Uninitialized Resource/Use After Free vulnerability
HIGH
CVE-2019-7615
Elastic APM agent for Ruby vulnerable to Improper Certificate Validation
HIGH
CVE-2019-13118
libxslt Type Confusion vulnerability that affects Nokogiri
HIGH
CVE-2022-29181
Nokogiri Improperly Handles Unexpected Data Type
HIGH
CVE-2019-25061
Insecure PRNG use in random_password_generator
HIGH
CVE-2022-50999
Integer Overflow or Wraparound in libxml2 affects Nokogiri
HIGH
CVE-2014-3211
Publify vulnerable to DoS attack
HIGH
CVE-2014-4995
VladTheEnterprising allows local users to obtain sensitive information by reading MySQL root password from temporary file
HIGH
CVE-2014-4991
codders-dataset Process Table Local Plaintext Credential Disclosure
HIGH
CVE-2014-4993
backup-agoddard and backup_checksum have Information Exposure vulnerability
HIGH
CVE-2014-4999
kajam allows local users to obtain sensitive information by listing the process
HIGH
CVE-2014-4997
point-cli allows local users to obtain sensitive information by listing the process
HIGH
CVE-2014-4998
lean-ruport allows local users to obtain sensitive information by listing the process
HIGH
CVE-2014-1835
Echor Ruby Gem credentials can be stolen via process table monitoring
HIGH
CVE-2014-1834
Echor contains Command Injection
HIGH
CVE-2017-15412
Nokogiri gem, via libxml, is affected by DoS vulnerabilities
HIGH
CVE-2017-10784
WEBrick RCE Vulnerability
HIGH
CVE-2017-14033
Ruby OpenSSL DoS Vulnerability
HIGH
CVE-2014-10077
i18n Vulnerable to Denial of Service Attack
HIGH
CVE-2013-2516
Fileutils Command Injection vulnerability
HIGH
CVE-2018-12029
Phusion Passenger Race Condition Allows Privilege Escalation
HIGH
CVE-2016-3072
Katello SQL Injection vulnerabilities
HIGH
CVE-2017-0900
RubyGems Improper Input Validation vulnerability
HIGH
CVE-2018-1000074
RubyGems Deserialization of Untrusted Data vulnerability
HIGH
CVE-2014-4326
Elasticsearch Logstash allows remote attackers to execute arbitrary commands
HIGH
CVE-2016-1000221
Logstash Logs Sensitive Information
HIGH
CVE-2018-18385
Asciidoctor Infinite Loop vulnerability
HIGH
CVE-2018-12028
Incorrect Access Control in Phusion Passenger
HIGH
CVE-2018-12027
Insecure Permissions in Phusion Passenger
HIGH
CVE-2018-1000075
RubyGems Infinite Loop vulnerability
HIGH
CVE-2017-0901
RubyGems may allow a maliciously crafted gem to overwrite files
HIGH
CVE-2017-0902
RubyGems has Origin Validation Error vulnerability
HIGH
CVE-2017-2667
hammer_cli_foreman Improper Certificate Validation vulnerability
HIGH
CVE-2017-14683
Gem in a Box vulnerable to Cross-site Request Forgery
HIGH
CVE-2018-1000073
RubyGems Link Following vulnerability
HIGH
CVE-2015-3649
open-uri-cached Gem for Ruby Unsafe Temporary File Creation Enables Code Execution
HIGH
CVE-2017-1000026
mixlib-archive Path Traversal vulnerability
HIGH
CVE-2017-16932
Nokogiri gem, via libxml, is affected by DoS vulnerabilities
HIGH
CVE-2013-4593
omniauth-facebook Improper Authentication vulnerability
HIGH
CVE-2022-29970
sinatra does not validate expanded path matches
HIGH
CVE-2012-6685
Nokogiri is vulnerable to XML External Entity (XXE) attack
HIGH
CVE-2012-6135
RubyGems passenger gem allows remote attackers to delete files
HIGH
CVE-2022-29498
SQL injection in blazer
HIGH
CVE-2022-24836
Nokogiri Inefficient Regular Expression Complexity
HIGH
CVE-2022-24440
Command injection in cocoapods-downloader
HIGH
CVE-2022-21223
Command injection in cocoapods-downloader
HIGH
CVE-2018-25032
Nokogiri affected by zlib's Out-of-bounds Write vulnerability
HIGH
CVE-2022-0759
Improper Certificate Validation in kubeclient
HIGH
CVE-2021-3589
Missing Authentication for Critical Function in Foreman Ansible