Medium
CVE-2024-29881
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 529
Reset filters
High
CVE-2024-29187
WiX based installers are vulnerable to binary hijack when run as SYSTEM
High
CVE-2024-29188
Malicious directory junction can cause WiX RemoveFoldersEx to possibly delete elevated files
High
ghsa-g4v6-69p6-q3p4
WiX Burn-based bundles are vulnerable to binary hijack when run as SYSTEM
High
ghsa-wq88-fq4x-h2pm
WiX Burn-based bundles are vulnerable to binary hijack when run as SYSTEM
High
CVE-2024-28252
CoreWCF NetFraming based services can leave connections open when they should be closed
High
ghsa-2x7m-gf85-3745
Remote Denial of Service Vulnerability in Microsoft QUIC
High
CVE-2024-21392
Microsoft Security Advisory CVE-2024-21392: .NET Denial of Service Vulnerability
Medium
CVE-2024-26318
Cross-site Scripting in Serenity
Critical
CVE-2024-0057
NuGet Client Security Feature Bypass Vulnerability
High
CVE-2024-21386
Microsoft Security Advisory CVE-2024-21386: .NET Denial of Service Vulnerability
High
ghsa-8v28-3g86-chj5
PanelSwWix4.Sdk .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges
High
ghsa-259p-rvjx-ffwg
Panel::Software Customized WiX .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges
High
CVE-2024-24810
WiX Toolset's .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges
Medium
CVE-2022-34716
.NET Information Disclosure Vulnerability
High
ghsa-jcmq-5rrv-j2g4
PowerShell is subject to remote code execution vulnerability
High
CVE-2024-23838
TrueLayer.Client SSRF when fetching payment or payment provider
Medium
CVE-2024-21319
Microsoft ASP.NET Core project templates vulnerable to denial of service
High
CVE-2024-21643
Microsoft.IdentityModel.Protocols.SignedHttpRequest remote code execution vulnerability
Medium
CVE-2023-51652
OWASP.AntiSamy mXSS when preserving comments
Medium
CVE-2023-51662
Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL)
Low
CVE-2023-49278
Brute force exploit can be used to collect valid usernames
Low
CVE-2023-49274
SMTP misconfiguration leading to "Forgot Password" exploit that leaks registered user email.
Low
CVE-2023-38694
Possible injection of HTML into user invite mails
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.