Browse CVEs by Ecosystem and Severity
2,578 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
CRITICAL
CVE-2021-30454
Uninitialized memory access in outer_cgi
CRITICAL
CVE-2021-30455
Double-free in id-map
CRITICAL
CVE-2021-29937
Free of uninitialized memory in telemetry
CRITICAL
CVE-2021-29936
Free of uninitialized memory in adtensor
CRITICAL
CVE-2021-29940
Double free in through
CRITICAL
CVE-2021-28306
Out of bounds read in fltk
CRITICAL
CVE-2021-26951
Out of bounds write in calamine
CRITICAL
CVE-2021-26955
Out of bounds read in xcb
CRITICAL
CVE-2021-26305
Read of uninitialized memory in cdr
CRITICAL
CVE-2021-25907
Double free in containers
CRITICAL
CVE-2021-25905
Out of bounds read in bra
CRITICAL
CVE-2021-27378
Incorrect check on buffer length in rand_core
CRITICAL
CVE-2021-27376
nb-connect invalidly assumes the memory layout of std::net::SocketAddr
CRITICAL
CVE-2021-28037
Data race in internment
CRITICAL
CVE-2021-28033
Deserializing an array can free uninitialized memory in byte_struct
CRITICAL
CVE-2021-28032
Use after free in nano_arena
CRITICAL
CVE-2020-35902
Use-after-free in actix-codec
CRITICAL
CVE-2020-35895
Out-of-bounds write in stack
CRITICAL
CVE-2020-35898
Use after free in actix-utils
CRITICAL
CVE-2020-35883
Path traversal in mozwire
CRITICAL
CVE-2020-35885
Double free in alpm-rs
CRITICAL
CVE-2020-35892
Out of bounds read in simple-slab
CRITICAL
CVE-2020-35886
Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr
CRITICAL
CVE-2020-35879
Data races in rulinalg
CRITICAL
CVE-2020-35880
Unsoundness in bigint
CRITICAL
CVE-2020-35881
Out of bounds write in traitobject
CRITICAL
CVE-2020-35866
Data races in rusqlite
CRITICAL
CVE-2020-35877
Drop of uninitialized memory in Ozone
CRITICAL
CVE-2020-35862
Use after free and double free in bitvec
CRITICAL
CVE-2020-35860
NULL Pointer Dereference in cbox
CRITICAL
CVE-2020-35876
Use after free in rio
CRITICAL
CVE-2019-25004
Unsound casting in flatbuffers
CRITICAL
CVE-2019-25009
Double free in http
CRITICAL
CVE-2020-35859
Out of bounds access in lucet-runtime-internals
CRITICAL
CVE-2020-35858
Out of bounds write in prost
CRITICAL
CVE-2020-35863
HTTP Request Smuggling in hyper
CRITICAL
CVE-2019-25002
Incorrect Comparison in sodiumoxide
CRITICAL
CVE-2019-16881
Use after free in portaudio-rs
CRITICAL
CVE-2020-25016
Out of bounds access in rgb
CRITICAL
CVE-2020-25573
Access of Uninitialized Pointer in linked-hash-map
CRITICAL
CVE-2019-15551
Double free in smallvec
CRITICAL
CVE-2019-15552
Use after free in libflate
CRITICAL
CVE-2019-16142
Improper Input Validation in renderdoc
CRITICAL
CVE-2019-16139
Out of bounds access in compact_arena
CRITICAL
CVE-2019-16138
Use after free in image
CRITICAL
CVE-2019-16140
Use-after-free in chttp
CRITICAL
CVE-2019-16143
Algorithms compute incorrect results in blake2
CRITICAL
CVE-2019-16880
Double free in linea
CRITICAL
CVE-2019-15543
Out of bounds write in slice-deque
CRITICAL
CVE-2019-15554
Memory corruption in smallvec