Browse CVEs by Ecosystem and Severity
2,313 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2020-36437
Data race in conqueue
HIGH
CVE-2019-15547
Mishandling of format strings in ncurses
HIGH
CVE-2019-15546
Format string vulnerabilities in pancurses
HIGH
CVE-2021-38511
Links in archive can create arbitrary directories
HIGH
CVE-2020-36436
Data races in unicycle
HIGH
CVE-2020-36458
Data races in lexer
HIGH
CVE-2020-36456
Data races in toolshed
HIGH
CVE-2020-36457
Data races in lever
HIGH
CVE-2020-36454
Data races in parc
HIGH
CVE-2020-36451
Data races in rcu_cell
HIGH
CVE-2020-36447
Data race in v9
HIGH
CVE-2020-15093
Improper verification of signature threshold in tough
HIGH
CVE-2020-26297
XSS in mdBook
HIGH
CVE-2020-36465
Use after free in generic-array
HIGH
CVE-2021-38196
Remote code execution in better-macro
HIGH
CVE-2021-29932
Uncontrolled Resource Consumption in parse_duration
HIGH
CVE-2021-26953
Read on uninitialized buffer in postscript
HIGH
CVE-2021-28036
quinn invalidly assumes the memory layout of std::net::SocketAddr
HIGH
CVE-2021-28030
Use of Uninitialized Resource in truetype
HIGH
CVE-2020-36210
Free of uninitialized memory in autorand
HIGH
CVE-2020-35882
Data races in rocket
HIGH
CVE-2020-35865
os_str_bytes relies on undefined behavior of `char::from_u32_unchecked`
HIGH
CVE-2020-35874
Use after free in internment
HIGH
CVE-2019-25003
libsecp256k1 contains side-channel timing attack
HIGH
CVE-2019-25006
Incorrect implementation of the Streebog hash functions in streebog
HIGH
CVE-2020-25791
Array size is not checked in sized-chunks
HIGH
CVE-2020-25791
Array size is not checked in sized-chunks
HIGH
CVE-2019-16137
Wrong memory orderings violates mutual exclusion in spin
HIGH
CVE-2019-15545
Failure to properly verify ed25519 signatures in libp2p-core
HIGH
CVE-2019-15544
Uncontrolled memory consumption in protobuf
HIGH
CVE-2019-15553
Exposure of uninitialized memory in memoffset
HIGH
CVE-2018-20994
Uncontrolled recursion in trust-dns-proto
HIGH
CVE-2016-10931
Improper Certificate Validation in openssl
HIGH
CVE-2019-0820
Regular Expression Denial of Service in System.Text.RegularExpressions
HIGH
CVE-2021-32804EPSS 85.0%
Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization
HIGH
CVE-2021-32803EPSS 0.1%
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning
HIGH
CVE-2020-1057
Remote code execution in ChakraCore
HIGH
CVE-2020-17048
Out-of-bounds Write in ChakraCore
HIGH
CVE-2021-27293
Incorrect Regular Expression in RestSharp
HIGH
CVE-2021-32740
Regular Expression Denial of Service in Addressable templates
HIGH
CVE-2021-35514
Code injection in Narou
HIGH
CVE-2021-33571EPSS 0.0%
Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks
HIGH
CVE-2021-20259
Exposure of Sensitive Information to an Unauthorized Actor in foreman_fog_proxmox
HIGH
CVE-2020-28469EPSS 0.3%
glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex
HIGH
CVE-2021-31542EPSS 6.4%
Path Traversal in Django
HIGH
CVE-2020-7671
HTTP Request Smuggling in goliath
HIGH
CVE-2020-7659
HTTP Request Smuggling in reel
HIGH
CVE-2020-13482
Improper Certificate Validation in EM-HTTP-Request
HIGH
CVE-2020-36327
Dependency Confusion in Bundler
HIGH
CVE-2020-13163
Improper certificate validation in em-imap