Browse CVEs by Ecosystem and Severity
2,313 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2017-15928
Ox gem crashes due to a crafted input
HIGH
CVE-2014-9489
gollum and gollum-lib allow remote authenticated users to execute arbitrary code
HIGH
CVE-2013-7463
Aescrypt does not sufficiently use random values
HIGH
CVE-2014-0130KEV
actionpack Path Traversal vulnerability
HIGH
CVE-2015-7581
actionpack is vulnerable to denial of service because of a wildcard controller route
HIGH
CVE-2016-7798
OpenSSL gem for Ruby using inadequate encryption strength
HIGH
CVE-2016-2098
actionpack allows remote code execution via application's unrestricted use of render method
HIGH
CVE-2016-3693
safemode gem allows context-dependent attackers to obtain sensitive information via the inspect method
HIGH
CVE-2016-0751
actionpack is vulnerable to denial of service via a crafted HTTP Accept header
HIGH
CVE-2016-10173
archive-tar-minitar and minitar vulnerable to Path Traversal
HIGH
CVE-2016-6317
ActiveRecord in Ruby on Rails allows database-query bypass
HIGH
CVE-2016-0752KEV
Directory traversal vulnerability in Action View in Ruby on Rails
HIGH
CVE-2017-18589
Large cookie Max-Age values can cause a denial of service