Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 524
Reset filtersKubernetes C# client accepts certificates from any CA without properly verifying the trust chain
ImageMagick BlobStream Forward-Seek Under-Allocation
FormCms avatar upload feature has a stored cross-site scripting (XSS) vulnerability
ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow
ImageMagick has a Format String Bug in InterpretImageFilename leads to arbitrary code execution
ImageMagick affected by divide-by-zero in ThumbnailImage via montage -geometry ":" leads to crash
ImageMagick has Undefined Behavior (function-type-mismatch) in CloneSplayTree
imagemagick: integer overflows in MNG magnification
imagemagick: heap-buffer overflow read in MNG magnification with alpha
ImageMagick has a heap-buffer-overflow
ImageMagick has a Memory Leak in magick stream
ImageMagick has a Heap Buffer Overflow in InterpretImageFilename
ImageMagick has a Stack Buffer Overflow in image.c
SixLabors ImageSharp Has Infinite Loop in GIF Decoder When Skipping Malformed Comment Extension Blocks
Umbraco Delivery API allows for cached requests to be returned with an invalid API key
ImageMagick has XMP profile write that triggers hang due to unbounded loop
SQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite
Umbraco CMS disclosure of configured password requirements
DotVVM allows path traversal when deployed in Debug mode
Microsoft Security Advisory CVE-2025-30399 | .NET Remote Code Vulnerability
Umbraco Vulnerable to By-Pass of Configured Allowed Extensions for File Uploads
DNN allows Stored Cross-Site Scripting (XSS) with svg files rendered inline
Microsoft.Build.Tasks.Core .NET Spoofing Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.