Browse CVEs by Ecosystem and Severity
5,778 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2021-22569
A potential Denial of Service issue in protobuf-java
CRITICAL
CVE-2019-6339
Arbitrary PHP code execution in Drupal
HIGH
CVE-2018-25023
Use of Uninitialized Resource in smallvec
CRITICAL
CVE-2018-25024
Out-of-bounds Write in actix-web
CRITICAL
CVE-2021-45684
Use of Uninitialized Resource in flumedb.
HIGH
CVE-2019-25054
Missing Initialization of Resource in pnet
CRITICAL
CVE-2020-36513
Use of Uninitialized Resource in acc_reader.
CRITICAL
CVE-2020-36512
Use of Uninitialized Resource in buffoon.
CRITICAL
CVE-2021-45682
Use of Uninitialized Resource in bronzedb-protocol.
CRITICAL
CVE-2021-45683
Use of Uninitialized Resource in binjs_io.
HIGH
CVE-2021-45694
Window may read from uninitialized memory locations in rdiff
CRITICAL
CVE-2021-45686
Use of Uninitialized Resource in csv-sniffer.
CRITICAL
CVE-2021-45685
columnar: Read on uninitialized buffer may cause UB (ColumnarReadExt::read_typed_vec())
CRITICAL
CVE-2021-45687
Deserialization of Untrusted Data in rust-cpuid
CRITICAL
CVE-2021-45688
Use of Uninitialized Resource in ash.
CRITICAL
CVE-2021-45690
Use of Uninitialized Resource in messagepack-rs.
CRITICAL
CVE-2021-45689
Use of Uninitialized Resource in gfx-auxil
CRITICAL
CVE-2021-45695
Incorrect reliance on Trait memory layout in mopa
CRITICAL
CVE-2021-45698
RPC call failure in ckb
CRITICAL
CVE-2021-45697
The `total_size` function for partial read the length of any `FixVec` is incorrect in molecule.
CRITICAL
CVE-2021-45696
Incorrect hash in sha2
CRITICAL
CVE-2021-45701
Use After Free in tremor-script
HIGH
CVE-2021-45699
Allocation of Resources Without Limits or Throttling in ckb
CRITICAL
CVE-2021-45703
Use of Uninitialized Resource in tectonic_xdv
CRITICAL
CVE-2021-45705
Pointer dereference in nanorand
HIGH
CVE-2021-45704
Out-of-bounds Write and Race Condition in metrics-util
CRITICAL
CVE-2021-45706
Memory flaw in zeroize_derive
HIGH
CVE-2021-45708
Abomonation transmutes &T to and from &[u8] without sufficient constraints
HIGH
CVE-2021-45711
Uncontrolled Resource Consumption in simple_asn1
CRITICAL
CVE-2021-45709
Use of a Broken or Risky Cryptographic Algorithm in crypto2
HIGH
CVE-2021-45710
Race Condition in tokio
MEDIUM
CVE-2020-28500EPSS 0.2%
Regular Expression Denial of Service (ReDoS) in lodash
MEDIUM
CVE-2021-43846
CSRF forgery protection bypass in solidus_frontend
HIGH
CVE-2021-43853
AjaxNetProfessional deserializes arbitrary JavaScript objects
MEDIUM
CVE-2021-44832EPSS 53.6%
Improper Input Validation and Injection in Apache Log4j2
CRITICAL
CVE-2021-32637
Authelia vulnerable to an authentication bypassed with malformed request URI on nginx
HIGH
CVE-2021-45105EPSS 71.4%
Apache Log4j2 vulnerable to Improper Input Validation and Uncontrolled Recursion
HIGH
CVE-2021-4044
Invalid handling of `X509_verify_cert()` internal errors in libssl
CRITICAL
CVE-2021-41816
Buffer overrun in CGI.escape_html
MEDIUM
CVE-2021-44528
actionpack Open Redirect in Host Authorization Middleware
CRITICAL
CVE-2021-45046KEVEPSS 94.3%
Incomplete fix for Apache Log4j vulnerability
CRITICAL
CVE-2021-44228KEVEPSS 94.4%
Remote code injection in Log4j
MEDIUM
CVE-2021-44420EPSS 0.1%
Potential bypass of an upstream access control based on URL paths in Django
HIGH
CVE-2021-28680
Improper Privilege Management in devise_masquerade
MEDIUM
CVE-2021-43809
Local Code Execution through Argument Injection via dash leading git url parameter in Gemfile.
HIGH
CVE-2021-43805
ReDos vulnerability on guest checkout email validation
CRITICAL
CVE-2021-23758KEV
Remote Code Execution in AjaxNetProfessional
MEDIUM
CVE-2021-27025
Silent Configuration Failure in Puppet Agent
MEDIUM
CVE-2021-27023
Unsafe HTTP Redirect in Puppet Agent and Puppet Server
HIGH
CVE-2021-43790
Use After Free in lucet