Browse CVEs by Ecosystem and Severity
275 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
MEDIUM
CVE-2018-1000855
Cross Site Scripting (XSS) vulnerability in easymon
MEDIUM
CVE-2018-1000842
Fat Free CRM vulnerable to Cross-site Scripting
MEDIUM
CVE-2018-16477
Exposure of Sensitive Information to an Unauthorized Actor in activestorage
MEDIUM
CVE-2017-1000043
Content Injection via TileJSON Name in mapbox.js
MEDIUM
CVE-2017-1000042
Content Injection via TileJSON attribute in mapbox.js
MEDIUM
CVE-2018-14042
Bootstrap Cross-site Scripting vulnerability
MEDIUM
CVE-2018-14041
Bootstrap Cross-site Scripting vulnerability
MEDIUM
CVE-2015-1866
ember-source vulnerable to Cross-site Scripting
MEDIUM
CVE-2015-7565
ember-source Cross-site Scripting vulnerability
MEDIUM
CVE-2018-11627
Sinatra Cross-site Scripting vulnerability
MEDIUM
CVE-2018-3741
rails-html-sanitizer Cross-site Scripting vulnerability
MEDIUM
CVE-2017-18258
Uncontrolled resource consumption in nokogiri
MEDIUM
CVE-2018-1000088
Doorkeeper is vulnerable to stored XSS and code execution
MEDIUM
CVE-2015-1828
http vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
MEDIUM
CVE-2018-1000119
rack-protection gem timing attack vulnerability when validating CSRF token
MEDIUM
CVE-2017-12097
delayed_job_web Cross-site Scripting vulnerability
MEDIUM
CVE-2017-17718
net-ldap Improper Certificate Validation vulnerability
MEDIUM
CVE-2017-16833
Gemirro Stored XSS in Gemspec "homepage" value
MEDIUM
CVE-2015-7578
rails-html-sanitizer Cross-site Scripting vulnerability
MEDIUM
CVE-2015-7580
rails-html-sanitizer Cross-site Scripting vulnerability
MEDIUM
CVE-2015-7579
rails-html-sanitizer Cross-site Scripting vulnerability
MEDIUM
CVE-2014-2538
rack-ssl Cross-site Scripting vulnerability
MEDIUM
CVE-2016-7103
jQuery-UI vulnerable to Cross-site Scripting in dialog closeText
MEDIUM
CVE-2016-6316
actionview Cross-site Scripting vulnerability
MEDIUM
CVE-2016-2097
actionview contains Path Traversal vulnerability