Browse CVEs by Ecosystem and Severity
5,778 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
MEDIUM
CVE-2020-5234
Untrusted data can lead to DoS attack due to hash collisions and stack overflow in MessagePack
CRITICAL
CVE-2019-19919
Prototype Pollution in handlebars
MEDIUM
CVE-2019-16782
Possible Information Leak / Session Hijack Vulnerability in Rack
MEDIUM
CVE-2019-16779
In RubyGem excon, interrupted Persistent Connections May Leak Response Data
CRITICAL
CVE-2019-10913
Invalid HTTP method overrides allow possible XSS or other attacks in Symfony
CRITICAL
CVE-2019-18889
Symfony Unsafe Cache Serialization Could Enable RCE
HIGH
CVE-2019-18841
Prototype Pollution in chartkick
CRITICAL
CVE-2019-10910
Symfony Service IDs Allow Injection
HIGH
CVE-2019-18848
JSON-jwt Gem lacked element count during splitting of JWE string
HIGH
CVE-2019-18409
Ruby_parser-legacy Incorrect Permission Assignment for Critical Resource
HIGH
CVE-2019-16929
Improper Authentication in Auth0.AuthenticationApi
CRITICAL
CVE-2019-17383
netaddr before 1.5.3 and 2.0.4 has Incorrect Default Permissions
HIGH
CVE-2024-22050
Malicious URL drafting attack against iodines static file server may allow path traversal
CRITICAL
CVE-2019-16676
Improper Input Validation in simple_form
CRITICAL
CVE-2019-16377
Consul gem insufficient authentication check - Multiple powers in one controller are not always checked correctly
HIGH
CVE-2019-1301
High severity vulnerability that affects System.Management.Automation
CRITICAL
CVE-2019-16060
Airbrake keys not being filtered
HIGH
CVE-2019-14262
Uncontrolled Resource Consumption in MetadataExtractor
CRITICAL
CVE-2019-15224
rest-client Gem Contains Malicious Code
CRITICAL
CVE-2019-5477
Nokogiri Command Injection Vulnerability
HIGH
CVE-2019-1258
Vulnerability in Azure Active Directory Authentication Library
HIGH
CVE-2018-20857
samlr XML nodes comment attack
CRITICAL
CVE-2019-14281
datagrid contains code Injection backdoor
CRITICAL
CVE-2019-14282
Code backdoor in simple_captcha2
CRITICAL
CVE-2019-1010191
SQL Injection in marginalia
MEDIUM
CVE-2019-1010266
Regular Expression Denial of Service (ReDoS) in lodash
HIGH
CVE-2019-13574
OS Command Injection in MiniMagick
CRITICAL
CVE-2019-13589
paranoid2 gem Code backdoor
CRITICAL
CVE-2019-1010306
Slanger Arbitrary command execution
CRITICAL
CVE-2019-10744
Prototype Pollution in lodash
CRITICAL
CVE-2019-13354
strong_password Ruby gem malicious version causing Remote Code Execution vulnerability
HIGH
CVE-2017-11430
OmniAuth-SAML authentication bypass via incorrect XML canonicalization and DOM traversal
HIGH
CVE-2017-11428
Ruby-SAML Improper Authentication vulnerability
CRITICAL
CVE-2019-9845
MadsKristensen.AspNetCore.Miniblog subject to Improper Input Validation
HIGH
CVE-2018-15811KEV
Inadequate Encryption Strength in DotNetNuke
HIGH
CVE-2018-18325KEV
Inadequate Encryption Strength in DotNetNuke
HIGH
CVE-2019-1020001
Path Traversal vulnerability that affects yard
HIGH
CVE-2019-8325
RubyGems Escape sequence injection in errors
HIGH
CVE-2019-8320
RubyGems Delete directory using symlink when decompressing tar
HIGH
CVE-2019-8324
Code injection in RubyGems
HIGH
CVE-2019-8321
RubyGems Escape sequence injection vulnerability in verbose
HIGH
CVE-2019-8322
RubyGems Escape sequence injection vulnerability in gem owner
HIGH
CVE-2019-8323
RubyGems Escape sequence injection vulnerability in api response handling
CRITICAL
CVE-2019-11027
ruby-openid SSRF via claimed_id request
HIGH
CVE-2015-9284
OmniAuth Ruby gem Cross-site Request Forgery in request phase
HIGH
CVE-2019-15542
Uncontrolled recursion leads to abort in HTML serialization
MEDIUM
CVE-2019-11358
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
CRITICAL
CVE-2019-7644
Critical severity vulnerability that affects Auth0-WCF-Service-JWT
HIGH
CVE-2019-0639
High severity vulnerability that affects Microsoft.ChakraCore
HIGH
CVE-2019-0609
High severity vulnerability that affects Microsoft.ChakraCore