Browse CVEs by Ecosystem and Severity
2,578 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
CRITICAL
CVE-2021-45687
Deserialization of Untrusted Data in rust-cpuid
CRITICAL
CVE-2021-45688
Use of Uninitialized Resource in ash.
CRITICAL
CVE-2021-45690
Use of Uninitialized Resource in messagepack-rs.
CRITICAL
CVE-2021-45689
Use of Uninitialized Resource in gfx-auxil
CRITICAL
CVE-2021-45695
Incorrect reliance on Trait memory layout in mopa
CRITICAL
CVE-2021-45698
RPC call failure in ckb
CRITICAL
CVE-2021-45697
The `total_size` function for partial read the length of any `FixVec` is incorrect in molecule.
CRITICAL
CVE-2021-45696
Incorrect hash in sha2
CRITICAL
CVE-2021-45701
Use After Free in tremor-script
CRITICAL
CVE-2021-45703
Use of Uninitialized Resource in tectonic_xdv
CRITICAL
CVE-2021-45705
Pointer dereference in nanorand
CRITICAL
CVE-2021-45706
Memory flaw in zeroize_derive
CRITICAL
CVE-2021-45709
Use of a Broken or Risky Cryptographic Algorithm in crypto2
CRITICAL
CVE-2021-32637
Authelia vulnerable to an authentication bypassed with malformed request URI on nginx
CRITICAL
CVE-2021-41816
Buffer overrun in CGI.escape_html
CRITICAL
CVE-2021-45046KEVEPSS 94.3%
Incomplete fix for Apache Log4j vulnerability
CRITICAL
CVE-2021-44228KEVEPSS 94.4%
Remote code injection in Log4j
CRITICAL
CVE-2021-23758KEV
Remote Code Execution in AjaxNetProfessional
CRITICAL
CVE-2021-3943
Moodle vulnerable to RCE via unsafe deserialization
CRITICAL
CVE-2021-41275
Spree Auth Devise vulnerability allows for authentication bypass through CSRF weakness
CRITICAL
GHSA-5629-8855-gf4g
Authentication Bypass by CSRF Weakness
CRITICAL
CVE-2021-41274
Authentication Bypass by CSRF Weakness
CRITICAL
CVE-2021-43569
Improper Verification of Cryptographic Signature in starkbank-ecdsa
CRITICAL
CVE-2021-41208
Incomplete validation in boosted trees code
CRITICAL
CVE-2021-40865
Deserialization of Untrusted Data leading to Remote Code Execution in Apache Storm
CRITICAL
CVE-2021-38294
Command injection leading to Remote Code Execution in Apache Storm
CRITICAL
CVE-2013-2512
OS Command Injection in ftpd
CRITICAL
CVE-2020-13909
Critical severity vulnerability in Ignition
CRITICAL
CVE-2021-33575
Remote code execution in ruby-jss
CRITICAL
CVE-2019-11831
Directory Traversal in typo3/phar-stream-wrapper
CRITICAL
CVE-2021-32619
Deno's static imports inside dynamically imported modules do not adhere to permission checks
CRITICAL
CVE-2021-31819
Remote Code Execution in Halibut
CRITICAL
CVE-2021-35042EPSS 89.9%
SQL Injection in Django
CRITICAL
CVE-2021-23427
Imporoper path validation in elFinder.NetCore
CRITICAL
CVE-2021-39185
Default CORS config allows any origin with credentials
CRITICAL
CVE-2021-28034
Drop of uninitialized memory in stack_dst
CRITICAL
CVE-2021-28028
Double free in toodee
CRITICAL
CVE-2021-32810
crossbeam-deque Data Race before v0.7.4 and v0.8.1
CRITICAL
CVE-2020-36432
Use of Uninitialized Resource in alg_ds
CRITICAL
CVE-2020-36443
Use of Uninitialized Resource in libp2p-deflate
CRITICAL
CVE-2020-36434
Double free in sys-info
CRITICAL
CVE-2020-36452
Memory corruption in array-tools
CRITICAL
CVE-2020-25576
Unaligned memory access in rand_core
CRITICAL
CVE-2021-38195
Overflow in libsecp256k1
CRITICAL
CVE-2021-38194
Calculation error in ark-r1cs-std
CRITICAL
CVE-2021-38190
Out of bounds write in nalgebra
CRITICAL
CVE-2021-38188
Incorrect buffer size calculation in iced-x86
CRITICAL
CVE-2021-38187
Incorrect cast in anymap
CRITICAL
CVE-2021-27377
Use-after-free in yottadb
CRITICAL
CVE-2017-1000430
Integer overflow in base64