Browse CVEs by Ecosystem and Severity
744 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
MEDIUM
CVE-2022-31026
Use of Uninitialized Variable in trilogy
CRITICAL
CVE-2021-33473
Arbitrary file write in dragonfly
HIGH
CVE-2022-30122
Denial of Service Vulnerability in Rack Multipart Parsing
CRITICAL
CVE-2022-30123
Possible shell escape sequence injection vulnerability in Rack
MEDIUM
CVE-2021-25969
Camaleon CMS Stored Cross-site Scripting vulnerability
HIGH
CVE-2021-25970
Camaleon CMS Insufficient Session Expiration vulnerability
MEDIUM
CVE-2014-0083
net-ldap has weak salt when generating passwords
MEDIUM
CVE-2021-39880
apollo_upload_server has Denial of Service vulnerability
HIGH
CVE-2021-30560
Nokogiri has vulnerable dependencies on libxml2 and libxslt
MEDIUM
CVE-2021-35440
Smashing Cross-site Scripting vulnerability
HIGH
CVE-2021-3517
Nokogiri contains libxml Out-of-bounds Write vulnerability
HIGH
CVE-2021-3518
Nokogiri Implements libxml2 version vulnerable to use-after-free
MEDIUM
CVE-2021-3537
Nokogiri Implements libxml2 version vulnerable to null pointer dereferencing
HIGH
CVE-2020-7385
Metasploit Framework user exposes Metasploit to same deserialization issue that is exploited by that module
HIGH
CVE-2020-25613
WEBRick vulnerable to HTTP Request/Response Smuggling
CRITICAL
CVE-2019-17268
omniauth-weibo-oauth2 included a code-execution backdoor inserted by a third party
CRITICAL
CVE-2015-2784
papercrop does not properly handle crop input
HIGH
CVE-2019-5815
Nokogiri implementation of libxslt vulnerable to heap corruption
HIGH
CVE-2019-12408
Missing Initialization of Resource in Apache Arrow
HIGH
CVE-2019-12410
Missing Initialization of Resource in Apache Arrow
HIGH
CVE-2019-18197
Nokogiri affected by libxslt Use of Uninitialized Resource/Use After Free vulnerability
MEDIUM
CVE-2019-16751
Devise Token Auth vulnerable to Cross-site Scripting
HIGH
CVE-2019-7615
Elastic APM agent for Ruby vulnerable to Improper Certificate Validation
HIGH
CVE-2019-13118
libxslt Type Confusion vulnerability that affects Nokogiri
CRITICAL
CVE-2022-1811
Publify vulnerable to cross site scripting
HIGH
CVE-2022-29181
Nokogiri Improperly Handles Unexpected Data Type
HIGH
CVE-2019-25061
Insecure PRNG use in random_password_generator
HIGH
CVE-2022-50999
Integer Overflow or Wraparound in libxml2 affects Nokogiri
HIGH
CVE-2014-3211
Publify vulnerable to DoS attack
MEDIUM
CVE-2014-0084
openshift-origin-node Improper Input Validation vulnerability
CRITICAL
CVE-2012-3503
Katello uses hard coded credential
MEDIUM
CVE-2022-0574
Publify Incorrect Authorization
MEDIUM
CVE-2022-0578
Publify vulnerable to code injection
HIGH
CVE-2014-4995
VladTheEnterprising allows local users to obtain sensitive information by reading MySQL root password from temporary file
HIGH
CVE-2014-4991
codders-dataset Process Table Local Plaintext Credential Disclosure
HIGH
CVE-2014-4993
backup-agoddard and backup_checksum have Information Exposure vulnerability
MEDIUM
CVE-2014-4996
VladTheEnterprising allows local users to write to arbitrary files via a symlink attack
HIGH
CVE-2014-4999
kajam allows local users to obtain sensitive information by listing the process
HIGH
CVE-2014-4997
point-cli allows local users to obtain sensitive information by listing the process
HIGH
CVE-2014-4998
lean-ruport allows local users to obtain sensitive information by listing the process
HIGH
CVE-2014-1835
Echor Ruby Gem credentials can be stolen via process table monitoring
HIGH
CVE-2014-1834
Echor contains Command Injection
MEDIUM
CVE-2014-0013
Ember.js Cross-site Scripting vulnerability
MEDIUM
CVE-2018-0499
xapian-core Cross-site Scripting vulnerability
MEDIUM
CVE-2014-0014
ember-source Cross-site Scripting vulnerability
HIGH
CVE-2017-15412
Nokogiri gem, via libxml, is affected by DoS vulnerabilities
HIGH
CVE-2017-10784
WEBrick RCE Vulnerability
HIGH
CVE-2017-14033
Ruby OpenSSL DoS Vulnerability
CRITICAL
CVE-2014-10075
karo Metacharacter Handling Remote Command Execution
HIGH
CVE-2014-10077
i18n Vulnerable to Denial of Service Attack