Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,120
Reset filtersCRLF injection in Refit's [Header], [HeaderCollection] and [Authorize] attributes
Apache Lucene.Net.Replicator Deserialization of Untrusted Data vulnerability
ICG.AspNetCore.Utilities.CloudStorage's Secure Token Durations Different Than Expected
Duende IdentityServer has insufficient validation of DPoP cnf claim in Local APIs
MPXJ has a Potential Path Traversal Vulnerability
Umbraco CMS Has Incomplete Server Termination During Explicit Sign-Out
Umbraco has a Potential Code Execution Risk When Viewing SVG Files in Full Screen in Backoffice
Umbraco CMS logout page displayed before session expiration
Umbraco CMS Improper Access Control Vulnerability Allows Low-Privilege Users to Access Webhook API
Umbraco CMS vulnerable to stored Cross-site Scripting in the "dictionary name" on Dictionary section
Security Update for the OPC UA .NET Standard Stack
Security Update for the OPC UA .NET Standard Stack
MessagePack allows untrusted data to lead to DoS attack due to hash collisions and stack overflow
Microsoft Security Advisory CVE-2024-43485 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2024-43484 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2024-43483 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2024-38229 | .NET Remote Code Execution Vulnerability
CRLF Injection in RestSharp's `RestRequest.AddHeader` method
Serilog Client IP Spoofing vulnerability
Umbraco CMS Improper Access Control vulnerability
Umbraco CMS vulnerable to Generation of Error Message Containing Sensitive Information
Microsoft Security Advisory CVE-2024-38168 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2024-38167 | .NET Information Disclosure Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.