Browse CVEs by Ecosystem and Severity
2,313 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2021-32629
Memory access due to code generation flaw in Cranelift module
HIGH
CVE-2021-29509
Puma's Keepalive Connections Causing Denial Of Service
HIGH
CVE-2019-3881
Insecure path handling in Bundler
HIGH
CVE-2021-23337EPSS 0.7%
Command Injection in lodash
HIGH
CVE-2021-28966
Tempfile on Windows path traversal vulnerability
HIGH
CVE-2021-22904
Possible DoS Vulnerability in Action Controller Token Authentication
HIGH
CVE-2021-22885
Action Pack contains Information Disclosure / Unintended Method Execution vulnerability
HIGH
CVE-2021-22902
Denial of Service in Action Dispatch
HIGH
CVE-2021-28965
REXML round-trip instability
HIGH
CVE-2021-31671
Pgsync Contains Cleartext Transmission of Sensitive Information
HIGH
CVE-2016-11086
Improper Certificate Validation in oauth ruby gem
HIGH
CVE-2021-29435
Cross-Site Request Forgery (CSRF) in trestle-auth
HIGH
CVE-2019-0992
Chakra Scripting Engine Out-of-bounds write
HIGH
CVE-2019-1003
Chakra Scripting Engine Out-of-bounds write
HIGH
CVE-2019-0989
Chakra Scripting Engine Memory Corruption Vulnerability
HIGH
CVE-2019-1195
Out-of-bounds write in Microsoft.ChakraCore
HIGH
CVE-2019-1141
Out-of-bounds write in Microsoft.ChakraCore
HIGH
CVE-2019-1139
Out-of-bounds write in Microsoft.ChakraCore
HIGH
CVE-2019-0993
Chakra Scripting Engine Out-of-bounds write
HIGH
CVE-2019-1140
Out-of-bounds write in Microsoft.ChakraCore
HIGH
CVE-2019-1131
Out-of-bounds write in Microsoft.ChakraCore
HIGH
CVE-2019-0991
Chakra Scripting Engine Out-of-bounds write
HIGH
CVE-2021-28834
Remote code execution in Kramdown
HIGH
CVE-2021-21355
Unrestricted File Upload in Form Framework
HIGH
CVE-2018-14550
Out-of-bounds write in libpng
HIGH
CVE-2020-24583EPSS 3.4%
Django Incorrect Default Permissions
HIGH
CVE-2021-22880
Active Record subject to Regular Expression Denial-of-Service (ReDoS)
HIGH
CVE-2021-21305
Code Injection vulnerability in CarrierWave::RMagick
HIGH
CVE-2021-21299
Multiple Transfer-Encoding headers misinterprets request payload
HIGH
CVE-2021-21289
Command Injection Vulnerability in Mechanize
HIGH
CVE-2021-21252
Regular Expression Denial of Service in jquery-validation
HIGH
CVE-2020-36463
Queues allow non-Send types to be sent to other threads, allowing data races
HIGH
CVE-2020-36208
conquer-once's OnceCell lacks Send bound for its Sync trait.
HIGH
CVE-2020-36449
ShmWriter allows sending non-Send type across threads
HIGH
CVE-2020-36461
MvccRwLock allows data races & aliasing violations
HIGH
CVE-2020-26254
omniauth-apple allows attacker to fake their email address during authentication
HIGH
CVE-2020-36438
Future<T> lacks bounds on Send and Sync.
HIGH
CVE-2020-16009KEV
Inappropriate implementation in V8
HIGH
CVE-2020-36462
Send bound needed on T (for Send impl of `Bucket2`)
HIGH
CVE-2020-36445
convec::ConVec<T> unconditionally implements Send/Sync
HIGH
CVE-2020-36448
Cache<K>: Send/Sync impls needs trait bounds on `K`
HIGH
CVE-2020-36435
Singleton lacks bounds on Send and Sync.
HIGH
CVE-2020-36453
Queue<T> should have a Send bound on its Send/Sync traits
HIGH
CVE-2020-26223
Authorization bypass in Spree
HIGH
CVE-2020-26222
Remote code execution in dependabot-core branch names when cloning
HIGH
CVE-2020-36450
Bunch<T> unconditionally implements Send/Sync
HIGH
CVE-2020-36441
AtomicBox<T> implements Send/Sync for any `T: Sized`
HIGH
CVE-2020-15240
Regression in JWT Signature Validation
HIGH
CVE-2020-36442
beef::Cow lacks a Sync bound on its Send trait allowing for data races
HIGH
CVE-2020-15269
Ensure that doorkeeper_token is valid when authenticating requests in API v2 calls