High
Exploited in attacks
CVE-2020-1147
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 524
Reset filters
High
CVE-2020-0603
Remote code execution in ASP.NET Core
High
CVE-2020-0606
Remote code execution in Microsoft.WindowsDesktop.App.Ref
Critical
CVE-2019-12277
Blogifier does not properly restrict APIs
Critical
CVE-2014-4172
Jasig Java CAS Client, .NET CAS Client, and phpCAS contain URL parameter injection vulnerability
Critical
CVE-2017-9246
New Relic .NET Agent contains SQL Injection
Medium
CVE-2017-0208
ChakraCore information disclosure vulnerability
Medium
CVE-2017-8659
ChakraCore information disclosure vulnerability
Medium
CVE-2017-15280
Umbraco CMS XXE Vulnerability
High
CVE-2017-11870
Chakra Core vulnerable to privilege escalation when writing to JavaScript null scope objects
High
CVE-2017-11862
Chakra Core vulnerable to privilege escalation due to type confusion
High
CVE-2017-11871
Chakra Core vulnerable to privilege escalation due to reading an invalid pointer
Critical
CVE-2021-33318
Improper Input Validation in IpMatcher
Medium
CVE-2019-0657
Improper Input Validation in .Net Framework API's
High
CVE-2017-11914
ChakraCore vulnerable to privilege escalation due to exposure from scriptFunction
Critical
CVE-2018-1000120
curl FTP path confusion leads to NIL byte out of bounds write
High
CVE-2017-11883
Denial of service in ASP.NET Core
Critical
CVE-2017-11767
ChakraCore vulnerable to privilege escalation
Medium
CVE-2019-0648
ChakraCore information disclosure vulnerability
Medium
CVE-2022-24849
Exposure of Sensitive Information to an Unauthorized Actor in DisCatSharp
High
CVE-2017-11770
Improper Certificate Validation
High
CVE-2020-1469
Infinite loop in .Net Bond
Critical
CVE-2021-46703
Code injection in RazorEngine
High
Exploited in attacks
CVE-2022-0609
Use after free in Animation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.