Browse CVEs by Ecosystem and Severity
2,313 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2019-0611
High severity vulnerability that affects Microsoft.ChakraCore
HIGH
CVE-2019-0769
High severity vulnerability that affects Microsoft.ChakraCore
HIGH
CVE-2019-0773
High severity vulnerability that affects Microsoft.ChakraCore
HIGH
CVE-2019-0771
High severity vulnerability that affects Microsoft.ChakraCore
HIGH
CVE-2018-6517
Improper Certificate Validation in chloride
HIGH
CVE-2019-5418KEV
Path Traversal in Action View
HIGH
CVE-2019-5419
Denial of Service Vulnerability in Action View
HIGH
CVE-2018-14404
Nokogiri NULL Pointer Dereference
HIGH
CVE-2018-20999
Flaw in streaming state reset() functions can create incorrect results.
HIGH
CVE-2018-16476
Improper Access Control in activejob
HIGH
CVE-2018-16470
Rack vulnerable to Denial of Service
HIGH
CVE-2018-0786
Improper Certificate Validation in Microsoft .NET Framework components
HIGH
CVE-2018-8269
Denial of service in ASP.NET Core
HIGH
CVE-2017-0247
ASP.NET Core fails to properly validate web requests
HIGH
CVE-2017-0249
High severity vulnerability that affects Microsoft.AspNetCore.Mvc
HIGH
CVE-2018-0787
ASP.NET Core allow an elevation of privilege
HIGH
CVE-2018-8171
Security feature bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated
HIGH
CVE-2018-8409
Denial of service vulnerability exists when System.IO.Pipelines improperly handles requests
HIGH
CVE-2018-0765
Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents
HIGH
CVE-2018-12086
High severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua
HIGH
CVE-2017-9822KEV
DNN (aka DotNetNuke) has Remote Code Execution via a cookie
HIGH
CVE-2018-0764
Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents
HIGH
CVE-2017-0929
High severity vulnerability that affects DotNetNuke.Core
HIGH
CVE-2018-1000210
High severity vulnerability that affects YamlDotNet and YamlDotNet.Signed
HIGH
CVE-2018-17567
Jekyll allows attackers to access arbitrary files by specifying a symlink
HIGH
CVE-2015-8806
Denial of service or RCE from libxml2 and libxslt
HIGH
CVE-2018-20993
Uncontrolled recursion leads to abort in deserialization
HIGH
CVE-2018-1000201
Ruby-ffi has a DLL loading issue
HIGH
CVE-2015-4619
Spina gem vulnerable to Cross-site request forgery (CSRF) vulnerability
HIGH
CVE-2016-5697
Ruby-saml allows attackers to perform XML signature wrapping attacks
HIGH
CVE-2016-10345
Phusion Passenger uses a known /tmp filename
HIGH
CVE-2015-8968
git-fastclone permits arbitrary shell command execution from .gitmodules
HIGH
CVE-2018-1000211
Doorkeeper subject to Incorrect Permission Assignment
HIGH
CVE-2016-10522
Cross-site request forgery in rails_admin
HIGH
CVE-2017-5029
Nokogiri implementation of libxslt lacks integer overflow checks
HIGH
CVE-2017-11173
Missing Regex anchor in Rack-Cors allows malicious third party site to perform CORS request
HIGH
CVE-2014-5001
Kcapifony gem for Ruby places database user passwords on the command line
HIGH
CVE-2018-20990
Links in archives can overwrite any existing file
HIGH
CVE-2018-20989
An integer underflow could lead to panic
HIGH
CVE-2018-3760
Sprockets path traversal leads to information leak
HIGH
CVE-2018-3740
Sanitize vulnerable to Improper Input Validation and Cross-site Scripting
HIGH
CVE-2014-4992
Cap-Strap gem for Ruby places credentials on the useradd command line
HIGH
CVE-2014-5004
brbackup exposes database password to unauthorized users
HIGH
CVE-2017-18076
Omniauth allows POST parameters to be stored in session
HIGH
CVE-2014-5002
lynx doesn't properly sanitize user input and exposes database password to unauthorized users
HIGH
CVE-2014-5000
lawn-login exposes database password to unauthorized users
HIGH
CVE-2016-10707
Denial of Service in jquery
HIGH
CVE-2017-17042
Arbitrary file read vulnerability in yard server
HIGH
CVE-2017-9050
Out-of-bounds read in nokogiri
HIGH
CVE-2017-16516
yajl-ruby gem Denial of Service vulnerability