Browse CVEs by Ecosystem and Severity
2,578 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
CRITICAL
CVE-2018-20997
Use after free in openssl
CRITICAL
CVE-2018-20998
Potential memory corruption in arrayfire
CRITICAL
CVE-2018-21000
Heap overflow or corruption in safe-transmute
CRITICAL
CVE-2018-20996
Double free in crossbeam
CRITICAL
CVE-2018-20995
Memory corruption slice-deque
CRITICAL
CVE-2018-20991
Double free in smallvec
CRITICAL
CVE-2021-3013
OS command injection in ripgrep
CRITICAL
CVE-2020-27998
Missing Authorization in FastReport
CRITICAL
CVE-2021-38189
SMTP command injection in lettre
CRITICAL
CVE-2021-32714
Integer overflow in `hyper`'s parsing of the `Transfer-Encoding` header leads to data loss
CRITICAL
CVE-2021-33564
Dragonfly contains remote code execution vulnerability
CRITICAL
CVE-2021-29508
Insecure deserialization in Wire
CRITICAL
CVE-2021-26701
.NET Core Remote Code Execution Vulnerability
CRITICAL
CVE-2019-15151
Double Free in Adplug
CRITICAL
CVE-2021-3129KEV
Unauthenticated remote code execution in Ignition
CRITICAL
CVE-2018-1285
XML External Entity attack in log4net
CRITICAL
CVE-2020-15146
Remote Code Execution in SyliusResourceBundle
CRITICAL
CVE-2020-14001
Unintended read access in kramdown gem
CRITICAL
CVE-2020-5413
Code execution in Spring Integration
CRITICAL
CVE-2020-7981
SQL Injection in Geocoder
CRITICAL
CVE-2020-8165
ActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore
CRITICAL
CVE-2020-8159
Arbitrary file write in actionpack-page_caching gem
CRITICAL
CVE-2020-8840
Deserialization of Untrusted Data in jackson-databind
CRITICAL
CVE-2019-20330
Deserialization of Untrusted Data in jackson-databind
CRITICAL
CVE-2019-10780
BibTeX-Ruby vulnerable to OS command injection
CRITICAL
CVE-2019-11325
Improper Input Validation in Symfony
CRITICAL
CVE-2019-19919
Prototype Pollution in handlebars
CRITICAL
CVE-2019-10913
Invalid HTTP method overrides allow possible XSS or other attacks in Symfony
CRITICAL
CVE-2019-18889
Symfony Unsafe Cache Serialization Could Enable RCE
CRITICAL
CVE-2019-10910
Symfony Service IDs Allow Injection
CRITICAL
CVE-2019-17383
netaddr before 1.5.3 and 2.0.4 has Incorrect Default Permissions
CRITICAL
CVE-2019-16676
Improper Input Validation in simple_form
CRITICAL
CVE-2019-16377
Consul gem insufficient authentication check - Multiple powers in one controller are not always checked correctly
CRITICAL
CVE-2019-16060
Airbrake keys not being filtered
CRITICAL
CVE-2019-15224
rest-client Gem Contains Malicious Code
CRITICAL
CVE-2019-5477
Nokogiri Command Injection Vulnerability
CRITICAL
CVE-2019-14281
datagrid contains code Injection backdoor
CRITICAL
CVE-2019-14282
Code backdoor in simple_captcha2
CRITICAL
CVE-2019-1010191
SQL Injection in marginalia
CRITICAL
CVE-2019-13589
paranoid2 gem Code backdoor
CRITICAL
CVE-2019-1010306
Slanger Arbitrary command execution
CRITICAL
CVE-2019-10744
Prototype Pollution in lodash
CRITICAL
CVE-2019-13354
strong_password Ruby gem malicious version causing Remote Code Execution vulnerability
CRITICAL
CVE-2019-9845
MadsKristensen.AspNetCore.Miniblog subject to Improper Input Validation
CRITICAL
CVE-2019-11027
ruby-openid SSRF via claimed_id request
CRITICAL
CVE-2019-7644
Critical severity vulnerability that affects Auth0-WCF-Service-JWT
CRITICAL
CVE-2019-10842
Bootstrap-sass contains code execution backdoor
CRITICAL
CVE-2019-5420
Use of Insufficiently Random Values in Railties Allows Remote Code Execution
CRITICAL
CVE-2019-3773
Vulnerability that affects org.springframework.ws:spring-ws and org.springframework.ws:spring-xml
CRITICAL
CVE-2018-14721
Server-Side Request Forgery (SSRF) in jackson-databind