Medium
ghsa-55p7-v223-x366
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 197
Reset filters
Medium
CVE-2024-39694
IdentityServer Open Redirect vulnerability
High
CVE-2024-41799
tgstation-server's DreamMaker environment files outside the deployment directory can be compiled and ran by insufficiently permissioned users
Low
CVE-2024-40636
Steeltoe Leaks Basic Auth Credentials to Logs After Fetch Registry Error
Medium
CVE-2024-30046
Microsoft Security Advisory CVE-2024-30046 | .NET Denial of Service Vulnerability
Medium
CVE-2024-32872
Umbraco Workflow's Backoffice users can execute arbitrary SQL
High
ghsa-2x7m-gf85-3745
Remote Denial of Service Vulnerability in Microsoft QUIC
Medium
CVE-2024-21319
Microsoft ASP.NET Core project templates vulnerable to denial of service
Medium
CVE-2023-51652
OWASP.AntiSamy mXSS when preserving comments
Low
CVE-2023-49279
Stored XSS via SVG File Upload
Low
CVE-2023-49278
Brute force exploit can be used to collect valid usernames
Medium
CVE-2023-49289
Ajax Pro Cross-site Scripting
Low
CVE-2021-22143
Exposure of Sensitive Information in Elastic APM .NET Agent
Medium
CVE-2023-48219
TinyMCE vulnerable to mutation Cross-site Scripting via special characters in unescaped text nodes
High
CVE-2023-36049
Microsoft Security Advisory CVE-2023-36049: .NET Elevation of Privilege Vulnerability
Medium
CVE-2023-36558
Microsoft Security Advisory CVE-2023-36558: .NET Security Feature Bypass Vulnerability
Medium
CVE-2023-45814
Bunkum tokens cached in the AuthenticationService are susceptible to a use-after-free
High
CVE-2023-36435
MsQuic Remote Denial of Service Vulnerability
High
CVE-2023-38171
Remote Denial of Service Vulnerability in Microsoft.Native.Quic.MsQuic.Schannel
High
ghsa-wqcr-xm43-hpqr
Vulnerable version of libwebp and can be exploited with a malicious source image
High
ghsa-7vpr-3ppw-qrpj
Imageflow affected by libwebp zero-day and should not be used with malicious source images.
Low
ghsa-6r78-m64m-qwcf
Moq v4.20.0-rc to 4.20.1 share hashed user data
High
Exploited in attacks
CVE-2023-38180
.NET Denial of Service Vulnerability
High
CVE-2023-33127
Microsoft Security Advisory CVE-2023-33127: .NET Remote Code Execution Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.