Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,125
Reset filtersImageMagick: Converting multi-layer nested MVG to SVG can cause DoS
ImageMagick has Possible Heap Information Disclosure in PSD ZIP Decompression
Microsoft Security Advisory CVE-2026-21218 | .NET Security Feature Bypass Vulnerability
Semantic Kernel has Arbitrary File Write via AI Agent Function Calling in .NET SDK
HtmlSanitizer has a bypass via template tag
Umbraco.Forms has Path Traversal and File Enumeration Vulnerabilities in Linux/Mac
DotNetNuke.Core Vulnerable to Stored XSS via Module Title
DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion Confirmation Modal
DotNetNuke.Core Vulnerable to Stored XSS in Scheduler LogNotes
DotNetNuke.Core has a potential XSS vulnerability in modules' header and footer
Umbraco.Forms CDN may cache sensitive form uploads when processed by ImageSharp
ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load
ImageMagick has a Memory Leak in LoadOpenCLDeviceBenchmark() when parsing malformed XML
ImageMagick MSL: Stack overflow via infinite recursion in ProcessMSLScript
ImageMagick releases an invalid pointer in BilateralBlur when memory allocation fails
Umbraco CMS contains a server-side request forgery vulnerability
UmbracoForms Vulnerable to Remote Code Execution via Untrusted WSDL Compilation in Dynamic SOAP Client Generation
AWS SDK for .NET V4 adopted defense in depth enhancement for region parameter value
ImageMagick's failure to limit MVG mutual causes Stack Overflow
ImageMagick's failure to limit the depth of SVG file reads caused a DoS attack
Umbraco CMS has an arbitrary file upload vulnerability
Piranha has stored cross-site scripting (XSS) vulnerability
Piranha has stored cross-site scripting (XSS) vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.