Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,120
Reset filtersCoreWCF: Unix Domain Socket PosixIdentity transport accepts connections that skip the security upgrade
CoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.
CoreWCF: SamlSerializer skips SignatureValue verification when SAML signing token is not an X.509 certificate
CoreWCF: WS-Security signature substitution via document-wide Signature lookup
CoreWCF: Pre-authentication infinite-loop CPU exhaustion in CoreWCF net.tcp / net.pipe / net.uds framing handshake
NCalc: Denial of Service via Unbounded and Non-Terminating Factorial Evaluation
Microsoft Security Advisory CVE-2026-45491 – .NET Tampering Vulnerability
Microsoft Security Advisory CVE-2026-45591 – ASP.NET Core Denial of Service Vulnerability
MessagePack's LZ4 decompression may fail with AccessViolationException after dereferencing memory from bad input
TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` injection
TinyMCE Cross-Site Scripting (XSS) vulnerability through `mce:protected` comments
TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributes
TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs
Nerdbank.MessagePack has Inefficient CPU Computation
Nerdbank.MessagePack has a memory amplification DoS in collection deserialization
ImageMagick: Heap Buffer Over-Read in distributed pixel cache server
ImageMagick: Information Disclosure in distributed pixel cache server because it is not using a challenge–response authentication model
ImageMagick: Race Condition in distributed pixel cache server can result in file descriptor hijacking
ImageMagick: Heap Buffer Over-Write in distributed pixel cache server
ImageMagick: Information Disclosure in PasskeyEncipherImage via AES-CTR nonce reuse
ImageMagick: Division by Zero in binomial kernel
ImageMagick: Heap Buffer Over-Write in json and yaml encoder of a single byte due to incorrect fix
Umbraco.Cms: XSS/HTML Injection in Umbraco Backoffice confirmation dialog
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.