Loading...

Sign in Get Started

Browse CVEs by Ecosystem and Severity

2,313 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.

All ecosystems npm pypi packagist maven go crates.io rubygems nuget

All severities critical high medium low KEV only

Clear all filters

CVE-2022-41323EPSS 8.1%

Django denial-of-service vulnerability in internationalized URLs

Magento Open Source allows Stored Cross-Site Scripting (Stored XSS)

NuGet Elevation of Privilege Vulnerability

Using a Custom Cipher with `NID_undef` may lead to NULL encryption

Exposure of sensitive Slack webhook URLs in debug logs and traces

arr-pm vulnerable to arbitrary shell execution when extracting or listing files contained in a malicious rpm.

WASM3 Improper Input Validation vulnerability

linked_list_allocator vulnerable to out-of-bound writes on `Heap` initialization and `Heap::extend`

.NET Denial of Service Vulnerability

axum-core has no default limit put on request bodies

NLnet Labs Routinator has Reachable Assertion vulnerability

.NET Denial of Service Vulnerability

.NET Denial of Service Vulnerability

Uncontrolled Resource Consumption in opcua

Incorrect Access Control and Cross Site Scripting in Jellyfin

CVE-2022-36359EPSS 0.8%

Django vulnerable to Reflected File Download attack

Apache Avro Rust SDK corrupted data read can cause crash

Apache Avro Rust SDK vulnerable to reader looping in cycle endlessly, consuming CPU

Apache Avro Rust SDK's Reader could consume memory beyond allowed constraints

Rust-WebSocket memory allocation based on untrusted length

`libsqlite3-sys` via C SQLite improperly validates array index

Juniper is vulnerable to @DOS GraphQL Nested Fragments overflow

TZInfo relative path traversal vulnerability allows loading of arbitrary files

Slack Morphism for Rust before 0.41.0 can leak Slack OAuth client information in application debug logs

Moment.js vulnerable to Inefficient Regular Expression Complexity

opensearch-ruby 2.x before 2.0.2 vulnerable to unsafe YAML deserialization

Improper Handling of Exceptional Conditions in Newtonsoft.Json

Memory Allocation with Excessive Size Value in OPCFoundation.NetStandard.Opc.Ua.Core

Uncontrolled Resource Consumption in OPCFoundation.NetStandard.Opc.Ua.Core

Incorrect Implementation of Authentication Algorithm in OPCFoundation.NetStandard.Opc.Ua.Core

Security Update for the OPC UA .NET Standard Stack

Link Following in Deno

Denial of Service Vulnerability in Rack Multipart Parsing

SQL injection in SiteServer CMS

ChakraCore information disclosure vulnerability

Camaleon CMS Insufficient Session Expiration vulnerability

ChakraCore RCE via Out-of-bounds write

Chakra Scripting Engine RCE via Out-of-bounds write

Chakra Scripting Engine RCE Vulnerability

Chakra Scripting Engine RCE via Out-of-bounds write

Chakra Scripting Engine and ChakraCore Vulnerable to Memory Corruption

Read buffer overruns processing ASN.1 strings

Nokogiri has vulnerable dependencies on libxml2 and libxslt

Drupal Core Cross-Site Request Forgery (CSRF) vulnerability

Nokogiri contains libxml Out-of-bounds Write vulnerability

Nokogiri Implements libxml2 version vulnerable to use-after-free

Drupal Core Arbitrary PHP code execution vulnerability

Metasploit Framework user exposes Metasploit to same deserialization issue that is exploited by that module

SaltStack Salt Directory Traversal vulnerability

ASP.NET Core and Visual Studio Denial of Service Vulnerability

Scan your dependencies for these CVEs