Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,120
Reset filtersOpenMcdf: Uncatchable infinite loop in DirectoryTree.TryGetDirectoryEntry on crafted CFB directory cycle
Scriban: array.insert_at index parameter DoS bypasses LoopLimit and LimitToString
ImageMagick: Heap Buffer Over-Write of a single byte in the JP2 encoder.
ImageMagick: Stack overflow in fx operation
ImageMagick: Use-After-Free in MSL decoder.
ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion
ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression
ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions
ImageMagick: Policy Bypass in MNG coder could
ImageMagick: Heap Buffer Over-Read of a 4 bytes in distort operation.
Microsoft Security Advisory CVE-2026-35433 – .NET Elevation of Privilege Vulnerability
Microsoft Security Advisory CVE-2026-42899 – ASP.NET Core Denial of Service Vulnerability
Microsoft Security Advisory CVE-2026-32175 – .NET Core Tampering Vulnerability
ImageMagick: Policy Bypass in PSD decoder
ImageMagick: Out-of-Bounds Read of a single byte in meta encoder
ImageMagick: Out-of-Bounds Read in connected components when the user supplies an invalid keep-top define
Microsoft DirectX12: .spritefont multiply overflow only in 32-bit builds
Microsoft DirectX: .spritefont multiply overflow only in 32-bit builds
ImageMagick: Heap Buffer Over-Read in IPTC encoder
Marten has an injection vulnerability in its full-text search regConfig parameter
oxidize-pdf: NaN/inf bypass in colour content-stream emission causes PDF rejection (DoS)
SharpCompress has directory traversal via directory entries in WriteToDirectory (zip slip variant)
OpenTelemetry.Exporter.Instana bypasses TLS certificate validation when a proxy is configured
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.