Browse CVEs by Ecosystem and Severity
2,313 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2020-35889
Misbehaving `HandleLike` implementation can lead to memory safety violation
HIGH
CVE-2015-4410
Moped Rubygem Data Injection Vulnerability
HIGH
CVE-2020-16253
PgHero gem allows CSRF
HIGH
CVE-2020-15133
Missing TLS certificate verification in faye-websocket
HIGH
CVE-2020-15134
Missing TLS certificate verification
HIGH
CVE-2020-10663
Unsafe object creation in json RubyGem
HIGH
CVE-2020-8203
Prototype Pollution in lodash
HIGH
CVE-2020-8163
Remote code execution via user-provided local names in ActionView
HIGH
CVE-2020-8161
Directory traversal in Rack::Directory app bundled with Rack
HIGH
CVE-2020-8184
Rack allows Percent-encoded cookies to overwrite existing prefixed cookie names
HIGH
CVE-2020-4054
Cross-site Scripting in Sanitize
HIGH
CVE-2020-7663
Regular Expression Denial of Service in websocket-extensions (RubyGem)
HIGH
CVE-2020-8162
Circumvention of file size limits in ActiveStorage
HIGH
CVE-2020-8164
Possible Strong Parameters Bypass in ActionPack
HIGH
CVE-2020-11076
HTTP Smuggling via Transfer-Encoding Header in Puma
HIGH
CVE-2020-8151
Information disclosure issue in Active Resource
HIGH
CVE-2020-11052
Improper Restriction of Excessive Authentication Attempts in Sorcery
HIGH
CVE-2020-10187
Exposure of Sensitive Information to an Unauthorized Actor in Doorkeeper
HIGH
CVE-2020-11020
Authentication and extension bypass in Faye
HIGH
CVE-2015-4411
BSON rubygem contains potential denial of service
HIGH
CVE-2020-5261
Missing Token Replay Detection in Saml2 Authentication services for ASP.NET
HIGH
CVE-2020-5257
Sort order SQL injection in Administrate
HIGH
CVE-2020-7595
libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation
HIGH
CVE-2020-5241
XSS/Script injection vulnerability in matestack
HIGH
CVE-2019-18841
Prototype Pollution in chartkick
HIGH
CVE-2019-18848
JSON-jwt Gem lacked element count during splitting of JWE string
HIGH
CVE-2019-18409
Ruby_parser-legacy Incorrect Permission Assignment for Critical Resource
HIGH
CVE-2019-16929
Improper Authentication in Auth0.AuthenticationApi
HIGH
CVE-2024-22050
Malicious URL drafting attack against iodines static file server may allow path traversal
HIGH
CVE-2019-1301
High severity vulnerability that affects System.Management.Automation
HIGH
CVE-2019-14262
Uncontrolled Resource Consumption in MetadataExtractor
HIGH
CVE-2019-1258
Vulnerability in Azure Active Directory Authentication Library
HIGH
CVE-2018-20857
samlr XML nodes comment attack
HIGH
CVE-2019-13574
OS Command Injection in MiniMagick
HIGH
CVE-2017-11430
OmniAuth-SAML authentication bypass via incorrect XML canonicalization and DOM traversal
HIGH
CVE-2017-11428
Ruby-SAML Improper Authentication vulnerability
HIGH
CVE-2018-15811KEV
Inadequate Encryption Strength in DotNetNuke
HIGH
CVE-2018-18325KEV
Inadequate Encryption Strength in DotNetNuke
HIGH
CVE-2019-1020001
Path Traversal vulnerability that affects yard
HIGH
CVE-2019-8325
RubyGems Escape sequence injection in errors
HIGH
CVE-2019-8320
RubyGems Delete directory using symlink when decompressing tar
HIGH
CVE-2019-8324
Code injection in RubyGems
HIGH
CVE-2019-8321
RubyGems Escape sequence injection vulnerability in verbose
HIGH
CVE-2019-8322
RubyGems Escape sequence injection vulnerability in gem owner
HIGH
CVE-2019-8323
RubyGems Escape sequence injection vulnerability in api response handling
HIGH
CVE-2015-9284
OmniAuth Ruby gem Cross-site Request Forgery in request phase
HIGH
CVE-2019-15542
Uncontrolled recursion leads to abort in HTML serialization
HIGH
CVE-2019-0639
High severity vulnerability that affects Microsoft.ChakraCore
HIGH
CVE-2019-0609
High severity vulnerability that affects Microsoft.ChakraCore
HIGH
CVE-2019-0592
High severity vulnerability that affects Microsoft.ChakraCore