High
CVE-2024-28252
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 524
Reset filters
High
ghsa-2x7m-gf85-3745
Remote Denial of Service Vulnerability in Microsoft QUIC
High
CVE-2024-21392
Microsoft Security Advisory CVE-2024-21392: .NET Denial of Service Vulnerability
Medium
CVE-2024-26318
Cross-site Scripting in Serenity
Critical
CVE-2024-0057
NuGet Client Security Feature Bypass Vulnerability
High
CVE-2024-21386
Microsoft Security Advisory CVE-2024-21386: .NET Denial of Service Vulnerability
High
ghsa-8v28-3g86-chj5
PanelSwWix4.Sdk .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges
High
ghsa-259p-rvjx-ffwg
Panel::Software Customized WiX .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges
High
CVE-2024-24810
WiX Toolset's .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges
Medium
CVE-2022-34716
.NET Information Disclosure Vulnerability
High
ghsa-jcmq-5rrv-j2g4
PowerShell is subject to remote code execution vulnerability
High
CVE-2024-23838
TrueLayer.Client SSRF when fetching payment or payment provider
Medium
CVE-2024-21319
Microsoft ASP.NET Core project templates vulnerable to denial of service
High
CVE-2024-21643
Microsoft.IdentityModel.Protocols.SignedHttpRequest remote code execution vulnerability
Medium
CVE-2023-51652
OWASP.AntiSamy mXSS when preserving comments
Medium
CVE-2023-51662
Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL)
Low
CVE-2023-49278
Brute force exploit can be used to collect valid usernames
Low
CVE-2023-49274
SMTP misconfiguration leading to "Forgot Password" exploit that leaks registered user email.
Low
CVE-2023-38694
Possible injection of HTML into user invite mails
Low
ghsa-w4x6-hh3x-wjrx
Stale copy of the public suffix list
Medium
CVE-2023-49289
Ajax Pro Cross-site Scripting
Low
CVE-2021-22143
Exposure of Sensitive Information in Elastic APM .NET Agent
Medium
CVE-2023-48219
TinyMCE vulnerable to mutation Cross-site Scripting via special characters in unescaped text nodes
High
CVE-2023-36049
Microsoft Security Advisory CVE-2023-36049: .NET Elevation of Privilege Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.