Browse CVEs by Ecosystem and Severity
2,313 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2022-23837
Denial of service in sidekiq
HIGH
CVE-2022-0235EPSS 0.6%
node-fetch forwards secure headers to untrusted sites
HIGH
CVE-2022-22691
Umbraco Persistent Password Reset Poison
HIGH
CVE-2022-22690
Umbraco ApplicationURL Overwrite
HIGH
CVE-2021-41819
Cookie Prefix Spoofing in CGI::Cookie.parse
HIGH
CVE-2021-45116EPSS 0.3%
Information disclosure in Django
HIGH
CVE-2021-45115EPSS 0.4%
Denial-of-service in Django
HIGH
CVE-2021-43045
Allocation of Resources Without Limits or Throttling in Apache Avro
HIGH
CVE-2021-22569
A potential Denial of Service issue in protobuf-java
HIGH
CVE-2018-25023
Use of Uninitialized Resource in smallvec
HIGH
CVE-2019-25054
Missing Initialization of Resource in pnet
HIGH
CVE-2021-45694
Window may read from uninitialized memory locations in rdiff
HIGH
CVE-2021-45699
Allocation of Resources Without Limits or Throttling in ckb
HIGH
CVE-2021-45704
Out-of-bounds Write and Race Condition in metrics-util
HIGH
CVE-2021-45708
Abomonation transmutes &T to and from &[u8] without sufficient constraints
HIGH
CVE-2021-45711
Uncontrolled Resource Consumption in simple_asn1
HIGH
CVE-2021-45710
Race Condition in tokio
HIGH
CVE-2021-43853
AjaxNetProfessional deserializes arbitrary JavaScript objects
HIGH
CVE-2021-45105EPSS 71.4%
Apache Log4j2 vulnerable to Improper Input Validation and Uncontrolled Recursion
HIGH
CVE-2021-4044
Invalid handling of `X509_verify_cert()` internal errors in libssl
HIGH
CVE-2021-28680
Improper Privilege Management in devise_masquerade
HIGH
CVE-2021-43805
ReDos vulnerability on guest checkout email validation
HIGH
CVE-2021-43790
Use After Free in lucet
HIGH
CVE-2021-25976
Cross-Site Request Forgery in PiranhaCMS
HIGH
CVE-2021-41817
Regular expression denial of service vulnerability (ReDoS) in date
HIGH
CVE-2021-41238
Missing Authorization with Default Settings in Dashboard UI
HIGH
CVE-2021-41150
Improper sanitization of delegated role names
HIGH
CVE-2021-41149
Improper sanitization of target names
HIGH
CVE-2021-41153
Specification non-compliance in JUMPI
HIGH
CVE-2020-13671KEV
Drupal core Unrestricted Upload of File with Dangerous Type
HIGH
CVE-2021-20319
coreos-installer improperly verifies GPG signature when decompressing gzipped artifact
HIGH
CVE-2021-41098
Improper Restriction of XML External Entity Reference (XXE) in Nokogiri on JRuby
HIGH
CVE-2021-41084
Response Splitting from unsanitized headers
HIGH
CVE-2021-23435
Clearance Gem Open Redirect Vulnerability
HIGH
CVE-2021-23428
Path traversal in elFinder.NetCore
HIGH
CVE-2021-31799
Arbitrary Code Execution in Rdoc
HIGH
CVE-2021-3749EPSS 1.5%
axios Inefficient Regular Expression Complexity vulnerability
HIGH
CVE-2021-37701EPSS 0.0%
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
HIGH
CVE-2021-37712EPSS 0.0%
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
HIGH
CVE-2021-37713EPSS 0.6%
Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization
HIGH
CVE-2021-36753
Uncontrolled Search Path Element in sharkdp/bat
HIGH
CVE-2020-36212
Update unsound DrainFilter and RString::retain
HIGH
CVE-2019-25008
Integer Overflow/Infinite Loop in the http crate
HIGH
CVE-2020-13759
Improper Synchronization and Race Condition in vm-memory
HIGH
CVE-2020-15254
crossbeam-channel Undefined Behavior before v0.4.4
HIGH
CVE-2020-36455
Slock<T> allows sending non-Send types across thread boundaries
HIGH
CVE-2020-36446
Data races in signal-simple
HIGH
CVE-2020-36444
Data races in async-coap
HIGH
CVE-2020-36440
Data races in libsbc
HIGH
CVE-2020-36439
Data races in ticketed_lock