Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 218
Reset filtersMicrosoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability
Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability
Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability
Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability
Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability
Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability
Microsoft Kiota: XML Doc-Comment Newline Breakout Code Injection
Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2026-50526 – .NET Tampering Vulnerability
Microsoft Security Advisory CVE-2026-47300 – .NET Elevation of Privilege Vulnerability
Microsoft Security Advisory CVE-2026-47303 – .NET Elevation of Privilege Vulnerability
Microsoft Security Advisory CVE-2026-50650 – .NET Elevation of Privilege Vulnerability
Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability
Microsoft Security Advisory CVE-2026-50528 – .NET Security Feature Bypass Vulnerability
Microsoft Security Advisory CVE-2026-50524 – .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2026-57108 – .NET Denial of Service Vulnerability
Prompty: Arbitrary file read via file reference expansion
Scriban: Template Writes to Arbitrary CLR Properties via `TypedObjectAccessor` (Mass Assignment + `private` / `init` / `internal` Setter Bypass)
Steeltoe's static JWKS cache shared across schemes and never invalidated
Steeltoe.Discovery.Eureka: Unrecognized DataCenterInfo.Name poisons entire registry fetch
CefSharp.Common: `FolderSchemeHandlerFactory` path boundary check can expose files outside the configured root folder
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.