Browse CVEs by Ecosystem and Severity
275 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
MEDIUM
CVE-2023-5349
memory leak flaw was found in ruby-magick
MEDIUM
CVE-2023-26141
sidekiq Denial of Service vulnerability
MEDIUM
CVE-2023-38037
Active Support Possibly Discloses Locally Encrypted Files
MEDIUM
CVE-2023-38697
protocol-http1 HTTP Request/Response Smuggling vulnerability
MEDIUM
CVE-2023-32693
Decidim Cross-site Scripting vulnerability in the external link redirections
MEDIUM
CVE-2023-36617
URI gem has ReDoS vulnerability
MEDIUM
CVE-2023-23913
rails-ujs vulnerable to DOM Based Cross-site Scripting contenteditable HTML Elements
MEDIUM
CVE-2023-27531
Kredis JSON Possible Deserialization of Untrusted Data Vulnerability
MEDIUM
CVE-2023-25309
Cross Site Scripting (XSS) Vulnerability in Fetlife rollout-ui gem
MEDIUM
CVE-2023-28846
unpoly-rails Denial of Service vulnerability
MEDIUM
CVE-2023-28120
Possible XSS Security Vulnerability in SafeBuffer#bytesplice
MEDIUM
CVE-2023-25015
Clockwork Web contains a Cross-Site Request Forgery Vulnerability with Rails < 5.2
MEDIUM
CVE-2023-0569
Publify contains Weak Password Requirements
MEDIUM
CVE-2023-23627
Improper neutralization of `noscript` element content may allow XSS in Sanitize
MEDIUM
CVE-2015-2179
xaviershay-dm-rails Gem for Ruby exposes sensitive information via the process table
MEDIUM
CVE-2023-22797
Open Redirect Vulnerability in Action Pack
MEDIUM
CVE-2022-2815
Publify Core does not strip metadata from images
MEDIUM
CVE-2020-36644
Inline SVG vulnerable to Cross-site Scripting
MEDIUM
CVE-2024-22049
httparty has multipart/form-data request tampering vulnerability
MEDIUM
CVE-2017-20159
keynote Cross-site Scripting vulnerability
MEDIUM
CVE-2019-25088
Oxidized Web vulnerable to Cross-site Scripting
MEDIUM
CVE-2020-36624
text_helpers uses web link to untrusted target with window.opener access
MEDIUM
CVE-2022-23520
Possible XSS vulnerability with certain configurations of rails-html-sanitizer
MEDIUM
CVE-2022-23519
Possible XSS vulnerability with certain configurations of rails-html-sanitizer
MEDIUM
CVE-2022-23518
Improper neutralization of data URIs may allow XSS in rails-html-sanitizer
MEDIUM
CVE-2022-23515
Improper neutralization of data URIs may allow XSS in Loofah
MEDIUM
CVE-2022-39281
Fat Free CRM vulnerable to Remote Denial of Service via Tasks endpoint
MEDIUM
CVE-2022-3171
protobuf-java has a potential Denial of Service issue
MEDIUM
CVE-2022-35956
update_by_case before 0.1.3 can be vulnerable to sql injection
MEDIUM
CVE-2016-3098
administrate vulnerable to Cross-Site Request Forgery
MEDIUM
CVE-2022-31160
jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label
MEDIUM
CVE-2020-35305
Gollum Cross-site Scripting vulnerability via filename parameter to New Page dialog
MEDIUM
CVE-2013-4170
Ember.js Potential XSS Exploit When Binding `tagName` to User-Supplied Data
MEDIUM
CVE-2021-3779
Externally Controlled Reference to a Resource in Another Sphere in ruby-mysql
MEDIUM
CVE-2022-32209
Rails::Html::Sanitizer vulnerable to Cross-site Scripting
MEDIUM
CVE-2022-31033
Mechanize before v2.8.5 vulnerable to authorization header leak on port redirect
MEDIUM
CVE-2022-31026
Use of Uninitialized Variable in trilogy
MEDIUM
CVE-2021-25969
Camaleon CMS Stored Cross-site Scripting vulnerability
MEDIUM
CVE-2014-0083
net-ldap has weak salt when generating passwords
MEDIUM
CVE-2021-39880
apollo_upload_server has Denial of Service vulnerability
MEDIUM
CVE-2021-35440
Smashing Cross-site Scripting vulnerability
MEDIUM
CVE-2021-3537
Nokogiri Implements libxml2 version vulnerable to null pointer dereferencing
MEDIUM
CVE-2019-16751
Devise Token Auth vulnerable to Cross-site Scripting
MEDIUM
CVE-2014-0084
openshift-origin-node Improper Input Validation vulnerability
MEDIUM
CVE-2022-0574
Publify Incorrect Authorization
MEDIUM
CVE-2022-0578
Publify vulnerable to code injection
MEDIUM
CVE-2014-4996
VladTheEnterprising allows local users to write to arbitrary files via a symlink attack
MEDIUM
CVE-2014-0013
Ember.js Cross-site Scripting vulnerability
MEDIUM
CVE-2018-0499
xapian-core Cross-site Scripting vulnerability
MEDIUM
CVE-2014-0014
ember-source Cross-site Scripting vulnerability