Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 524
Reset filtersMicrosoft Security Advisory CVE-2025-21172 | .NET and Visual Studio Remote Code Execution Vulnerability
Microsoft Security Advisory CVE-2025-21171 | .NET Remote Code Execution Vulnerability
Git Credential Manager carriage-return character in remote URL allows malicious repository to leak credentials
The Umbraco Heartcore headless client library uses a vulnerable Refit dependency package
Piranha CMS Cross-site Scripting vulnerability
Oqtane Framework Insecure Direct Object Reference vulnerability
TShock Security Escalation Exploit
.NET Remote Code Execution Vulnerability
.NET Denial of Service Vulnerability
CRLF injection in Refit's [Header], [HeaderCollection] and [Authorize] attributes
Duende IdentityServer has insufficient validation of DPoP cnf claim in Local APIs
Umbraco has a Potential Code Execution Risk When Viewing SVG Files in Full Screen in Backoffice
Umbraco CMS vulnerable to stored Cross-site Scripting in the "dictionary name" on Dictionary section
MessagePack allows untrusted data to lead to DoS attack due to hash collisions and stack overflow
Microsoft Security Advisory CVE-2024-43485 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2024-43484 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2024-43483 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2024-38229 | .NET Remote Code Execution Vulnerability
CRLF Injection in RestSharp's `RestRequest.AddHeader` method
Serilog Client IP Spoofing vulnerability
Umbraco CMS vulnerable to Generation of Error Message Containing Sensitive Information
Microsoft Security Advisory CVE-2024-38168 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2024-38167 | .NET Information Disclosure Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.