Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 529
Reset filtersSerilog Client IP Spoofing vulnerability
Umbraco CMS vulnerable to Generation of Error Message Containing Sensitive Information
Microsoft Security Advisory CVE-2024-38168 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2024-38167 | .NET Information Disclosure Vulnerability
IdentityServer Open Redirect vulnerability
IdentityServer Open Redirect vulnerability
CLSA Directory Traversal vulnerability
Steeltoe Leaks Basic Auth Credentials to Logs After Fetch Registry Error
Mimekit has vulnerable dependency that can lead to denial of service
Microsoft Security Advisory CVE-2024-38095 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2024-38081 | .NET Elevation of Privilege Vulnerability
Microsoft Security Advisory CVE-2024-35264 | .NET Remote Code Execution Vulnerability
Microsoft Security Advisory CVE-2024-30105 | .NET Denial of Service Vulnerability
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option
TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
Microsoft Security Advisory CVE-2024-30046 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2024-30045 | .NET Remote code Execution Vulnerability
.NET Elevation of Privilege Vulnerability
Blind SSRF Leads to Port Scan by using Webhooks
MSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of service
Sensitive query parameters logged by default in OpenTelemetry.Instrumentation http and AspNetCore
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling iframes
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.