Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 218
Reset filtersImageMagick has a Format String Bug in InterpretImageFilename leads to arbitrary code execution
ImageMagick has Undefined Behavior (function-type-mismatch) in CloneSplayTree
imagemagick: integer overflows in MNG magnification
imagemagick: heap-buffer overflow read in MNG magnification with alpha
ImageMagick has a Memory Leak in magick stream
ImageMagick has a Heap Buffer Overflow in InterpretImageFilename
ImageMagick has a Stack Buffer Overflow in image.c
ImageMagick has XMP profile write that triggers hang due to unbounded loop
DotVVM allows path traversal when deployed in Debug mode
Microsoft Security Advisory CVE-2025-30399 | .NET Remote Code Vulnerability
Microsoft.Build.Tasks.Core .NET Spoofing Vulnerability
YoutubeDLSharp allows command injection on windows system due to non sanitized arguments
Apache ActiveMQ NMS OpenWire Client Deserialization of Untrusted Data vulnerability
DotNetNuke.Core Vulnerable to Server-Side Request Forgery (SSRF)
Microsoft Security Advisory CVE-2025-24070: .NET Elevation of Privilege Vulnerability
OpenTelemetry .NET has Denial of Service (DoS) Vulnerability in API Package
Microsoft Security Advisory CVE-2025-21176 | .NET and Visual Studio Remote Code Execution Vulnerability
Microsoft Security Advisory CVE-2025-21172 | .NET and Visual Studio Remote Code Execution Vulnerability
Microsoft Security Advisory CVE-2025-21171 | .NET Remote Code Execution Vulnerability
Git Credential Manager carriage-return character in remote URL allows malicious repository to leak credentials
.NET Remote Code Execution Vulnerability
.NET Denial of Service Vulnerability
Apache Lucene.Net.Replicator Deserialization of Untrusted Data vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.