Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 524
Reset filtersIdentityServer Open Redirect vulnerability
CLSA Directory Traversal vulnerability
Steeltoe Leaks Basic Auth Credentials to Logs After Fetch Registry Error
Mimekit has vulnerable dependency that can lead to denial of service
Microsoft Security Advisory CVE-2024-38095 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2024-38081 | .NET Elevation of Privilege Vulnerability
Microsoft Security Advisory CVE-2024-35264 | .NET Remote Code Execution Vulnerability
Microsoft Security Advisory CVE-2024-30105 | .NET Denial of Service Vulnerability
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option
TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
Microsoft Security Advisory CVE-2024-30046 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2024-30045 | .NET Remote code Execution Vulnerability
.NET Elevation of Privilege Vulnerability
Blind SSRF Leads to Port Scan by using Webhooks
MSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of service
Sensitive query parameters logged by default in OpenTelemetry.Instrumentation http and AspNetCore
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling iframes
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements
WiX based installers are vulnerable to binary hijack when run as SYSTEM
Malicious directory junction can cause WiX RemoveFoldersEx to possibly delete elevated files
WiX Burn-based bundles are vulnerable to binary hijack when run as SYSTEM
WiX Burn-based bundles are vulnerable to binary hijack when run as SYSTEM
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.