Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 524
Reset filtersCross-Site Scripting in jquery
Subject Confirmation Method not validated in Saml2 Authentication Services for ASP.NET
Internal NCryptDecrypt method could be used externally from WindowsHello library.
Missing Token Replay Detection in Saml2 Authentication services for ASP.NET
Untrusted data can lead to DoS attack due to hash collisions and stack overflow in MessagePack
High severity vulnerability that affects PeterO.Cbor
High severity vulnerability that affects System.Management.Automation
System.Management.Automation subject to bypass via script debugging
Low severity vulnerability that affects Gw2Sharp
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
ASP.NET Core fails to properly validate web requests
Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc
High severity vulnerability that affects Microsoft.AspNetCore.Mvc
Moderate severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua
The installation wizard in DotNetNuke (DNN) allows privilege escalation
High severity vulnerability that affects YamlDotNet and YamlDotNet.Signed
Bootstrap Cross-site Scripting vulnerability
Denial of Service in jquery
Cross-Site Scripting (XSS) in jquery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.