Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 58
Reset filtersCsla affected by Remote Code Execution via WcfProxy (NetDataContractSerializer)
ImageMagick has Integer Overflow in BMP Decoder (ReadBMP)
ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)
ImageMagick BlobStream Forward-Seek Under-Allocation
ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow
ImageMagick has Undefined Behavior (function-type-mismatch) in CloneSplayTree
imagemagick: integer overflows in MNG magnification
imagemagick: heap-buffer overflow read in MNG magnification with alpha
Microsoft Identity Web Exposes Client Secrets and Certificate Information in Service Logs
DoS Vulnerability in TraceContextPropagator.Extract - OpenTelemetry.Api
OpenTelemetry .NET has Denial of Service (DoS) Vulnerability in API Package
AspNetCore Remote Authenticator for CIE3.0 Allows SAML Response Signature Verification Bypass
The AspNetCore Remote Authenticator for SPID Allows SAML Response Signature Verification Bypass
DotNetZip Directory Traversal vulnerability
Umbraco CMS vulnerable to Generation of Error Message Containing Sensitive Information
TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option
TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
Sensitive query parameters logged by default in OpenTelemetry.Instrumentation http and AspNetCore
Microsoft Security Advisory CVE-2023-33126: .NET Remote Code Execution Vulnerability
Jasig Java CAS Client, .NET CAS Client, and phpCAS contain URL parameter injection vulnerability
Improper Limitation of a Pathname to a Restricted Directory in SharpZipLib
Path Traversal in SharpZipLib
Cross-site scripting vulnerability in TinyMCE plugins
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.