Browse CVEs by Ecosystem and Severity
5,778 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2021-31671
Pgsync Contains Cleartext Transmission of Sensitive Information
HIGH
CVE-2016-11086
Improper Certificate Validation in oauth ruby gem
CRITICAL
CVE-2021-26701
.NET Core Remote Code Execution Vulnerability
HIGH
CVE-2021-29435
Cross-Site Request Forgery (CSRF) in trestle-auth
MEDIUM
CVE-2020-5811
Authenticated path traversal in Umbraco CMS
MEDIUM
CVE-2020-24393
Improper Certificate Validation in TweetStream
MEDIUM
CVE-2020-7942
Improper Certificate Validation in Puppet
MEDIUM
CVE-2021-28658EPSS 1.5%
Directory Traversal in Django
HIGH
CVE-2019-0992
Chakra Scripting Engine Out-of-bounds write
HIGH
CVE-2019-1003
Chakra Scripting Engine Out-of-bounds write
HIGH
CVE-2019-0989
Chakra Scripting Engine Memory Corruption Vulnerability
HIGH
CVE-2019-1195
Out-of-bounds write in Microsoft.ChakraCore
HIGH
CVE-2019-1141
Out-of-bounds write in Microsoft.ChakraCore
HIGH
CVE-2019-1139
Out-of-bounds write in Microsoft.ChakraCore
HIGH
CVE-2019-0993
Chakra Scripting Engine Out-of-bounds write
HIGH
CVE-2019-1140
Out-of-bounds write in Microsoft.ChakraCore
HIGH
CVE-2019-1131
Out-of-bounds write in Microsoft.ChakraCore
HIGH
CVE-2019-0991
Chakra Scripting Engine Out-of-bounds write
CRITICAL
CVE-2019-15151
Double Free in Adplug
CRITICAL
CVE-2021-3129KEV
Unauthenticated remote code execution in Ignition
HIGH
CVE-2021-28834
Remote code execution in Kramdown
MEDIUM
CVE-2020-24392
Improper Certificate Validation in twitter-stream
HIGH
CVE-2021-21355
Unrestricted File Upload in Form Framework
HIGH
CVE-2018-14550
Out-of-bounds write in libpng
HIGH
CVE-2020-24583EPSS 3.4%
Django Incorrect Default Permissions
MEDIUM
CVE-2020-24584EPSS 3.3%
Django Incorrect Default Permissions
MEDIUM
CVE-2021-3281EPSS 36.2%
Django Directory Traversal via archive.extract
HIGH
CVE-2021-22880
Active Record subject to Regular Expression Denial-of-Service (ReDoS)
HIGH
CVE-2021-21305
Code Injection vulnerability in CarrierWave::RMagick
HIGH
CVE-2021-21299
Multiple Transfer-Encoding headers misinterprets request payload
HIGH
CVE-2021-21289
Command Injection Vulnerability in Mechanize
CRITICAL
CVE-2018-1285
XML External Entity attack in log4net
HIGH
CVE-2021-21252
Regular Expression Denial of Service in jquery-validation
MEDIUM
CVE-2020-26298
Injection/XSS in Redcarpet
HIGH
CVE-2020-36463
Queues allow non-Send types to be sent to other threads, allowing data races
HIGH
CVE-2020-36208
conquer-once's OnceCell lacks Send bound for its Sync trait.
HIGH
CVE-2020-36449
ShmWriter allows sending non-Send type across threads
HIGH
CVE-2020-36461
MvccRwLock allows data races & aliasing violations
HIGH
CVE-2020-26254
omniauth-apple allows attacker to fake their email address during authentication
HIGH
CVE-2020-36438
Future<T> lacks bounds on Send and Sync.
HIGH
CVE-2020-16009KEV
Inappropriate implementation in V8
HIGH
CVE-2020-36462
Send bound needed on T (for Send impl of `Bucket2`)
HIGH
CVE-2020-36445
convec::ConVec<T> unconditionally implements Send/Sync
HIGH
CVE-2020-36448
Cache<K>: Send/Sync impls needs trait bounds on `K`
HIGH
CVE-2020-36435
Singleton lacks bounds on Send and Sync.
HIGH
CVE-2020-36453
Queue<T> should have a Send bound on its Send/Sync traits
HIGH
CVE-2020-26223
Authorization bypass in Spree
HIGH
CVE-2020-26222
Remote code execution in dependabot-core branch names when cloning
HIGH
CVE-2020-36450
Bunch<T> unconditionally implements Send/Sync
HIGH
CVE-2020-36441
AtomicBox<T> implements Send/Sync for any `T: Sized`