Browse CVEs by Ecosystem and Severity
2,313 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2020-21514
Fluent Fluentd and Fluent-ui use default password
HIGH
CVE-2023-28756
Ruby Time component ReDoS issue
HIGH
CVE-2023-28755
Ruby URI component ReDoS issue
HIGH
CVE-2023-28638
Snappier vulnerable to buffer overrun due to improper restriction of operations within the bounds of a memory buffer
HIGH
CVE-2023-28446
Interactive `run` permission prompt spoofing via improper ANSI neutralization
HIGH
CVE-2023-28431
Frontier's modexp precompile is slow for even modulus
HIGH
CVE-2023-27530
Rack has possible DoS Vulnerability in Multipart MIME parsing
HIGH
CVE-2022-48282
MongoDB .NET/C# Driver vulnerable to Deserialization of Untrusted Data
HIGH
CVE-2023-24580EPSS 22.1%
Resource exhaustion in Django
HIGH
CVE-2023-21808
.NET Remote Code Execution Vulnerability
HIGH
CVE-2023-0215
openssl-src vulnerable to Use-after-free following `BIO_new_NDEF`
HIGH
CVE-2023-0216
openssl-src subject to Invalid pointer dereference in `d2i_PKCS7` functions
HIGH
CVE-2022-4450
openssl-src contains Double free after calling `PEM_read_bio_ex`
HIGH
CVE-2023-0217
openssl-src subject to NULL dereference validating DSA public key
HIGH
CVE-2023-0401
openssl-src contains `NULL` dereference during PKCS7 data verification
HIGH
CVE-2023-0286
Vulnerable OpenSSL included in cryptography wheels
HIGH
CVE-2023-24814
TYPO3 is vulnerable to Cross-Site Scripting via frontend rendering
HIGH
CVE-2023-23969EPSS 6.1%
Django contains Uncontrolled Resource Consumption via cached header
HIGH
CVE-2015-8314
Devise Gem for Ruby Unauthorized Access Using "Remember Me" Cookie
HIGH
GHSA-q95h-cqrv-8jv5
ExifTool vulnerable to arbitrary code execution
HIGH
CVE-2023-22499
Deno is vulnerable to race condition via interactive permission prompt spoofing
HIGH
CVE-2009-4123
jruby-openssl gem for JRuby fails to do proper certificate validation
HIGH
CVE-2022-44566
Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter
HIGH
CVE-2023-22794
SQL Injection Vulnerability via ActiveRecord comments
HIGH
CVE-2022-44570
Denial of service via header parsing in Rack
HIGH
CVE-2023-21893
Component takeover in Oracle Data Provider for .NET
HIGH
CVE-2022-47318
Code injection in ruby git
HIGH
CVE-2023-21538
.NET Denial of Service Vulnerability
HIGH
CVE-2023-22895
bzip2 allows attackers to cause a denial of service via a large file that triggers an integer overflow
HIGH
CVE-2022-46648
ruby-git has potential remote code execution vulnerability
HIGH
CVE-2023-22626
PgHero Allows Information Disclosure Through EXPLAIN Feature
HIGH
CVE-2021-4250
active_attr Improper Resource Shutdown or Release vulnerability
HIGH
CVE-2022-41089
.NET Remote Code Execution Vulnerability
HIGH
CVE-2022-3996
Denial of service by double-checked locking in openssl-src
HIGH
CVE-2022-23517
Inefficient Regular Expression Complexity in rails-html-sanitizer
HIGH
CVE-2022-23516
Uncontrolled Recursion in Loofah
HIGH
CVE-2022-23514
Inefficient Regular Expression Complexity in Loofah
HIGH
CVE-2022-23496
Yauaa vulnerable to ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List
HIGH
CVE-2022-23476
Unchecked return value from xmlTextReaderExpand
HIGH
CVE-2022-23486
libp2p DoS vulnerability from lack of resource management
HIGH
CVE-2022-45442
Sinatra vulnerable to Reflected File Download attack
HIGH
CVE-2021-33621
HTTP response splitting in CGI
HIGH
CVE-2022-39393
Wasmtime may have data leakage between instances in the pooling allocator
HIGH
CVE-2022-39392
Bug in Wasmtime implementation of pooling instance allocator
HIGH
CVE-2022-3786
X.509 Email Address Variable Length Buffer Overflow
HIGH
CVE-2022-39294
conduit-hyper vulnerable to Denial of Service from unchecked request length
HIGH
CVE-2021-26423
.NET Core Elevation of Privilege Vulnerability
HIGH
CVE-2022-23267
.NET Denial of Service Vulnerability
HIGH
CVE-2022-24464
.NET Denial of Service Vulnerability
HIGH
CVE-2022-21986
.NET Denial of Service Vulnerability