Browse CVEs by Ecosystem and Severity
2,313 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2016-3382
ChakraCore RCE Vulnerability
HIGH
CVE-2016-3389
ChakraCore RCE Vulnerability
HIGH
CVE-2016-3390
ChakraCore RCE Vulnerability
HIGH
CVE-2016-3386
ChakraCore RCE Vulnerability
HIGH
CVE-2016-7189
ChakraCore RCE Vulnerability
HIGH
CVE-2016-7194
ChakraCore RCE Vulnerability
HIGH
CVE-2016-7190
ChakraCore RCE Vulnerability
HIGH
CVE-2016-7201KEV
ChakraCore RCE Vulnerability
HIGH
CVE-2016-7200KEV
ChakraCore RCE Vulnerability
HIGH
CVE-2016-7202
ChakraCore RCE Vulnerability
HIGH
CVE-2016-7203
ChakraCore RCE Vulnerability
HIGH
CVE-2016-7208
ChakraCore RCE Vulnerability
HIGH
CVE-2016-7240
ChakraCore RCE Vulnerability
HIGH
CVE-2016-7242
ChakraCore RCE Vulnerability
HIGH
CVE-2016-7243
ChakraCore RCE Vulnerability
HIGH
CVE-2017-15412
Nokogiri gem, via libxml, is affected by DoS vulnerabilities
HIGH
CVE-2017-10784
WEBrick RCE Vulnerability
HIGH
CVE-2017-14033
Ruby OpenSSL DoS Vulnerability
HIGH
CVE-2018-15121
Auth0-ASPNET and Auth0-ASPNET-Owin vulnerable to Cross-Site Request Forgery
HIGH
CVE-2014-10077
i18n Vulnerable to Denial of Service Attack
HIGH
CVE-2019-0564
Denial of service in ASP.NET Core
HIGH
CVE-2019-0545
Exposure of Sensitive Information in System.Net.Http
HIGH
CVE-2013-2516
Fileutils Command Injection vulnerability
HIGH
CVE-2018-12029
Phusion Passenger Race Condition Allows Privilege Escalation
HIGH
CVE-2018-11406
Symfony CSRF Token Fixation
HIGH
CVE-2016-3072
Katello SQL Injection vulnerabilities
HIGH
CVE-2017-11914
ChakraCore vulnerable to privilege escalation due to exposure from scriptFunction
HIGH
CVE-2017-11909
ChakraCore vulnerable to remote code execution
HIGH
CVE-2017-11911
ChakraCore RCE Vulnerability
HIGH
CVE-2017-11893
ChakraCore vulnerable to remote code execution
HIGH
CVE-2017-0900
RubyGems Improper Input Validation vulnerability
HIGH
CVE-2018-1000074
RubyGems Deserialization of Untrusted Data vulnerability
HIGH
CVE-2014-4326
Elasticsearch Logstash allows remote attackers to execute arbitrary commands
HIGH
CVE-2016-1000221
Logstash Logs Sensitive Information
HIGH
CVE-2018-8145
ChakraCore information disclosure vulnerability
HIGH
CVE-2018-18385
Asciidoctor Infinite Loop vulnerability
HIGH
CVE-2018-12028
Incorrect Access Control in Phusion Passenger
HIGH
CVE-2018-12027
Insecure Permissions in Phusion Passenger
HIGH
CVE-2018-1000075
RubyGems Infinite Loop vulnerability
HIGH
CVE-2018-0818
ChakraCore RCE Vulnerability
HIGH
CVE-2017-8700
Cross-origin Resource Sharing bypass in ASP.NET Core
HIGH
CVE-2017-11883
Denial of service in ASP.NET Core
HIGH
CVE-2017-0901
RubyGems may allow a maliciously crafted gem to overwrite files
HIGH
CVE-2017-0902
RubyGems has Origin Validation Error vulnerability
HIGH
CVE-2017-2667
hammer_cli_foreman Improper Certificate Validation vulnerability
HIGH
CVE-2017-14683
Gem in a Box vulnerable to Cross-site Request Forgery
HIGH
CVE-2019-0861
ChakraCore Memory Corruption Vulnerability
HIGH
CVE-2019-0860
ChakraCore Memory Corruption Vulnerability
HIGH
CVE-2019-0829
ChakraCore Memory Corruption Vulnerability
HIGH
CVE-2019-0810
ChakraCore RCE Vulnerability