Medium
CVE-2023-36558
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 524
Reset filters
Medium
CVE-2023-45819
TinyMCE XSS vulnerability in notificationManager.open API
Medium
CVE-2023-45818
TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin
Medium
CVE-2023-45814
Bunkum tokens cached in the AuthenticationService are susceptible to a use-after-free
High
CVE-2023-36435
MsQuic Remote Denial of Service Vulnerability
High
ghsa-wqcr-xm43-hpqr
Vulnerable version of libwebp and can be exploited with a malicious source image
High
ghsa-4c29-gfrp-g6x9
CefSharp affected by libvpx's heap buffer overflow in vp8 encoding
High
ghsa-7vpr-3ppw-qrpj
Imageflow affected by libwebp zero-day and should not be used with malicious source images.
Critical
ghsa-j646-gj5p-p45g
CefSharp affected by heap buffer overflow in WebP
High
CVE-2023-41890
Sustainsys.Saml2 Insufficient Identity Provider Issuer Validation
High
CVE-2023-36792
Microsoft Security Advisory CVE-2023-36792: .NET Remote Code Execution Vulnerability
High
CVE-2023-36794
Microsoft Security Advisory CVE-2023-36794: .NET Remote Code Execution Vulnerability
High
CVE-2023-36793
Microsoft Security Advisory CVE-2023-36793: .NET Remote Code Execution Vulnerability
High
CVE-2023-36796
Microsoft Security Advisory CVE-2023-36796: .NET Remote Code Execution Vulnerability
Medium
CVE-2023-36799
Microsoft Security Advisory CVE-2023-36799: .NET Denial of Service Vulnerability
High
CVE-2023-35391
.NET Information Disclosure Vulnerability
Low
ghsa-6r78-m64m-qwcf
Moq v4.20.0-rc to 4.20.1 share hashed user data
High
CVE-2023-35390
.NET Remote Code Execution Vulnerability
High
CVE-2023-38178
.NET Denial of Service Vulnerability
High
Exploited in attacks
CVE-2023-38180
.NET Denial of Service Vulnerability
High
CVE-2023-37267
Umbraco allows possible Admin-level access to backoffice without Auth under rare conditions
High
CVE-2023-33127
Microsoft Security Advisory CVE-2023-33127: .NET Remote Code Execution Vulnerability
High
CVE-2023-33170
Microsoft Security Advisory CVE-2023-33170: .NET Security Feature Bypass Vulnerability
High
CVE-2023-33126
Microsoft Security Advisory CVE-2023-33126: .NET Remote Code Execution Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.