Browse CVEs by Ecosystem and Severity
5,778 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2022-21223
Command injection in cocoapods-downloader
HIGH
CVE-2022-24791
Use after free in Wasmtime
CRITICAL
CVE-2022-24803
Command Injection vulnerability in asciidoctor-include-ext
CRITICAL
CVE-2022-22965KEV
Remote Code Execution in Spring Framework
CRITICAL
CVE-2022-27815
Insecure Temporary File in SWHKD
CRITICAL
CVE-2022-24790
Puma vulnerable to HTTP Request Smuggling
HIGH
CVE-2022-24789
Server side request forgery in C1 CMS
CRITICAL
CVE-2022-24783
Sandbox bypass leading to arbitrary code execution in Deno
CRITICAL
CVE-2021-46433
Sandbox bypass in fenom
CRITICAL
CVE-2017-9841KEV
Code Injection in PHPUnit
CRITICAL
CVE-2020-13756
Sabberworm PHP CSS Parser Code injection vulnerability in allSelectors()
HIGH
CVE-2018-25032
Nokogiri affected by zlib's Out-of-bounds Write vulnerability
HIGH
CVE-2022-0759
Improper Certificate Validation in kubeclient
CRITICAL
CVE-2022-1025
Improper access control allows admin privilege escalation in Argo CD
HIGH
CVE-2021-3589
Missing Authentication for Critical Function in Foreman Ansible
CRITICAL
CVE-2022-0749
Deserialization of Untrusted Data in SinGooCMS.Utility
CRITICAL
CVE-2021-44906EPSS 0.9%
Prototype Pollution in minimist
HIGH
CVE-2022-0778
openssl-src's infinite loop in `BN_mod_sqrt()` reachable when parsing certificates
CRITICAL
CVE-2022-21831
Possible code injection vulnerability in Rails / Active Storage
HIGH
CVE-2022-24713
Rust's regex crate vulnerable to regular expression denial of service
CRITICAL
CVE-2021-46703
Code injection in RazorEngine
CRITICAL
CVE-2022-22947KEV
Spring Cloud Gateway vulnerable to Code Injection when Gateway Actuator endpoint enabled, exposed, unsecured
HIGH
CVE-2024-22051
Integer overflow in cmark-gfm table parsing extension leads to heap memory corruption
HIGH
CVE-2022-24722
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in view_component
CRITICAL
CVE-2022-24720
Remote shell execution vulnerability in image_processing
HIGH
CVE-2022-0609KEV
Use after free in Animation
CRITICAL
CVE-2021-23682
Prototype Pollution in litespeed.js and appwrite/server-ce
CRITICAL
CVE-2022-24086KEV
Magento improper input validation vulnerability
HIGH
CVE-2022-23639
crossbeam-utils Unsoundness of AtomicCell<{i,u}64> arithmetics on 32-bit targets that support Atomic{I,U}64
CRITICAL
CVE-2018-1002105
Privilege Escalation in Kubernetes
MEDIUM
CVE-2020-2023
Improper Privilege Management and Execution with Unnecessary Privileges in Kata Containers
CRITICAL
CVE-2022-24988
Buffer Overflow in galois_2p8
CRITICAL
CVE-2020-13675
Unrestricted Upload of File with Dangerous Type in Drupal core
HIGH
CVE-2022-23634
Puma used with Rails may lead to Information Exposure
HIGH
CVE-2022-23633
Exposure of information in Action Pack
HIGH
CVE-2020-11969
Missing Authentication for Critical Function in Apache TomEE
HIGH
CVE-2022-0524
Publify Business Logic Errors
MEDIUM
CVE-2022-22818EPSS 0.6%
Cross-site Scripting in Django
HIGH
CVE-2022-23833EPSS 3.6%
Infinite Loop in Django
HIGH
CVE-2022-23837
Denial of service in sidekiq
HIGH
CVE-2022-0235EPSS 0.6%
node-fetch forwards secure headers to untrusted sites
HIGH
CVE-2022-22691
Umbraco Persistent Password Reset Poison
HIGH
CVE-2022-22690
Umbraco ApplicationURL Overwrite
HIGH
CVE-2021-41819
Cookie Prefix Spoofing in CGI::Cookie.parse
MEDIUM
CVE-2022-0274
Cross-site Scripting OrchardCore.Application.Cms.Targets
CRITICAL
CVE-2021-43297
Deserialization of Untrusted Data in Dubbo
HIGH
CVE-2021-45116EPSS 0.3%
Information disclosure in Django
MEDIUM
CVE-2021-45452EPSS 0.3%
Directory-traversal in Django
HIGH
CVE-2021-45115EPSS 0.4%
Denial-of-service in Django
HIGH
CVE-2021-43045
Allocation of Resources Without Limits or Throttling in Apache Avro