Browse CVEs by Ecosystem and Severity
5,778 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2019-15553
Exposure of uninitialized memory in memoffset
CRITICAL
CVE-2019-15554
Memory corruption in smallvec
CRITICAL
CVE-2018-20997
Use after free in openssl
CRITICAL
CVE-2018-20998
Potential memory corruption in arrayfire
CRITICAL
CVE-2018-21000
Heap overflow or corruption in safe-transmute
CRITICAL
CVE-2018-20996
Double free in crossbeam
HIGH
CVE-2018-20994
Uncontrolled recursion in trust-dns-proto
HIGH
CVE-2016-10931
Improper Certificate Validation in openssl
CRITICAL
CVE-2018-20995
Memory corruption slice-deque
CRITICAL
CVE-2018-20991
Double free in smallvec
MEDIUM
CVE-2021-23343EPSS 0.3%
Regular Expression Denial of Service in path-parse
CRITICAL
CVE-2021-3013
OS command injection in ripgrep
HIGH
CVE-2019-0820
Regular Expression Denial of Service in System.Text.RegularExpressions
HIGH
CVE-2021-32804EPSS 85.0%
Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization
HIGH
CVE-2021-32803EPSS 0.1%
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning
MEDIUM
CVE-2020-9472
Unrestricted Upload of File with Dangerous Type in Umbraco CMS
MEDIUM
CVE-2020-8867
Insufficient Session Expiration and TOCTOU Race Condition in OPC FOundation UA .Net Standard
HIGH
CVE-2020-1057
Remote code execution in ChakraCore
CRITICAL
CVE-2020-27998
Missing Authorization in FastReport
HIGH
CVE-2020-17048
Out-of-bounds Write in ChakraCore
MEDIUM
CVE-2021-28833
qiita-markdown Cross-site Scripting vulnerability
HIGH
CVE-2021-27293
Incorrect Regular Expression in RestSharp
CRITICAL
CVE-2021-38189
SMTP command injection in lettre
HIGH
CVE-2021-32740
Regular Expression Denial of Service in Addressable templates
CRITICAL
CVE-2021-32714
Integer overflow in `hyper`'s parsing of the `Transfer-Encoding` header leads to data loss
HIGH
CVE-2021-35514
Code injection in Narou
HIGH
CVE-2021-33571EPSS 0.0%
Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks
MEDIUM
CVE-2021-33203EPSS 0.3%
Path Traversal in Django
HIGH
CVE-2021-20259
Exposure of Sensitive Information to an Unauthorized Actor in foreman_fog_proxmox
MEDIUM
CVE-2021-32052EPSS 2.6%
Header injection possible in Django
HIGH
CVE-2020-28469EPSS 0.3%
glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex
HIGH
CVE-2021-31542EPSS 6.4%
Path Traversal in Django
CRITICAL
CVE-2021-33564
Dragonfly contains remote code execution vulnerability
HIGH
CVE-2020-7671
HTTP Request Smuggling in goliath
HIGH
CVE-2020-7659
HTTP Request Smuggling in reel
HIGH
CVE-2020-13482
Improper Certificate Validation in EM-HTTP-Request
HIGH
CVE-2020-36327
Dependency Confusion in Bundler
HIGH
CVE-2020-13163
Improper certificate validation in em-imap
HIGH
CVE-2021-32629
Memory access due to code generation flaw in Cranelift module
CRITICAL
CVE-2021-29508
Insecure deserialization in Wire
HIGH
CVE-2021-29509
Puma's Keepalive Connections Causing Denial Of Service
HIGH
CVE-2019-3881
Insecure path handling in Bundler
HIGH
CVE-2021-23337EPSS 0.7%
Command Injection in lodash
HIGH
CVE-2021-28966
Tempfile on Windows path traversal vulnerability
HIGH
CVE-2021-22904
Possible DoS Vulnerability in Action Controller Token Authentication
HIGH
CVE-2021-22885
Action Pack contains Information Disclosure / Unintended Method Execution vulnerability
MEDIUM
CVE-2021-22903
Possible Open Redirect Vulnerability in Action Pack
HIGH
CVE-2021-22902
Denial of Service in Action Dispatch
HIGH
CVE-2021-28965
REXML round-trip instability
MEDIUM
CVE-2020-25739
Gon gem lack of escaping certain input when outputting as JSON