Browse CVEs by Ecosystem and Severity
5,778 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2017-15928
Ox gem crashes due to a crafted input
HIGH
CVE-2014-9489
gollum and gollum-lib allow remote authenticated users to execute arbitrary code
CRITICAL
CVE-2009-2422
rails vulnerable to improper authentication
CRITICAL
CVE-2015-8857
Incorrect Handling of Non-Boolean Comparisons During Minification in uglify-js
HIGH
CVE-2013-7463
Aescrypt does not sufficiently use random values
MEDIUM
CVE-2015-7578
rails-html-sanitizer Cross-site Scripting vulnerability
HIGH
CVE-2014-0130KEV
actionpack Path Traversal vulnerability
CRITICAL
CVE-2015-7541
colorscore Command Injection vulnerability
HIGH
CVE-2015-7581
actionpack is vulnerable to denial of service because of a wildcard controller route
MEDIUM
CVE-2015-7580
rails-html-sanitizer Cross-site Scripting vulnerability
MEDIUM
CVE-2015-7579
rails-html-sanitizer Cross-site Scripting vulnerability
MEDIUM
CVE-2014-2538
rack-ssl Cross-site Scripting vulnerability
CRITICAL
CVE-2016-6582
Doorkeeper is vulnerable to replay attacks
CRITICAL
CVE-2016-10193
espeak-ruby allows arbitrary command execution
CRITICAL
CVE-2017-7540
Safemode Gem Has Incomplete List of Disallowed Inputs
HIGH
CVE-2016-7798
OpenSSL gem for Ruby using inadequate encryption strength
HIGH
CVE-2016-2098
actionpack allows remote code execution via application's unrestricted use of render method
HIGH
CVE-2016-3693
safemode gem allows context-dependent attackers to obtain sensitive information via the inspect method
CRITICAL
CVE-2016-10194
festivaltts4r allows arbitrary command execution
HIGH
CVE-2016-0751
actionpack is vulnerable to denial of service via a crafted HTTP Accept header
CRITICAL
CVE-2017-5946
Directory traversal vulnerability in RubyZip
HIGH
CVE-2016-10173
archive-tar-minitar and minitar vulnerable to Path Traversal
MEDIUM
CVE-2016-7103
jQuery-UI vulnerable to Cross-site Scripting in dialog closeText
MEDIUM
CVE-2016-6316
actionview Cross-site Scripting vulnerability
HIGH
CVE-2016-6317
ActiveRecord in Ruby on Rails allows database-query bypass
MEDIUM
CVE-2016-2097
actionview contains Path Traversal vulnerability
HIGH
CVE-2016-0752KEV
Directory traversal vulnerability in Action View in Ruby on Rails
HIGH
CVE-2017-18589
Large cookie Max-Age values can cause a denial of service