High
CVE-2026-106113
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 62
Reset filters
High
CVE-2026-106118
ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write
High
CVE-2026-105796
Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators
High
CVE-2026-100369
CliInvoke: Argument Injection in Extensibility Runner Factory
High
CVE-2026-85756
SSH.NET: ScpClient allows server-side RCE via default SCP path handling
Critical
CVE-2026-75513
Marten's LINQ provider has SQL injection via unescaped string literals
Medium
CVE-2026-62899
Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability
High
CVE-2026-59859
Microsoft Kiota: Code Generation Literal Injection in Kiota PHP Generator
High
CVE-2026-59861
Microsoft Kiota: Code Generation Literal Injection in Kiota Ruby Generator
Critical
CVE-2026-45288
Marten has an injection vulnerability in its full-text search regConfig parameter
High
CVE-2026-43938
YAFNET has Unauthenticated Stored Second-Order XSS in Admin Event Log via Reflected `User-Agent` Header
Medium
CVE-2026-42191
OpenTelemetry's disk retry default temp path enables local blob injection via OTLP Exporter
Medium
CVE-2026-40894
OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers
Medium
CVE-2026-33536
ImageMagick has an Out-of-bounds Write via InterpretImageFilename
Medium
CVE-2023-1289
ImageMagick: Specially crafted SVG leads to segmentation fault and generate trash files in "/tmp", possible to leverage DoS
Medium
CVE-2026-30227
MimeKit has CRLF Injection in Quoted Local-Part that Enables SMTP Command Injection and Email Forgery
Medium
CVE-2026-26983
ImageMagick: Invalid MSL <map> can result in a use after free
Medium
CVE-2026-25797
ImageMagick: Code Injection via PostScript header in ps coders
Critical
CVE-2026-25592
Semantic Kernel has Arbitrary File Write via AI Agent Function Calling in .NET SDK
Low
CVE-2025-67290
Piranha has stored cross-site scripting (XSS) vulnerability
Critical
CVE-2025-55315
Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability
Medium
CVE-2025-59821
DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profile
High
CVE-2025-57803
ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow
High
CVE-2025-55298
ImageMagick has a Format String Bug in InterpretImageFilename leads to arbitrary code execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.