Loading...

Sign in Get Started

Browse CVEs by Ecosystem and Severity

842 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.

All ecosystems npm pypi packagist maven go crates.io rubygems nuget

All severities critical high medium low KEV only

Clear all filters

TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements

Azure Storage Movement Client Library Denial of Service Vulnerability

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

Umbraco Commerce vulnerable to Stored Cross-site Scripting on Print Functionality

Umbraco CMS Open Redirect Bypass Protection

Microsoft Security Advisory CVE-2024-30046 | .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2024-30045 | .NET Remote code Execution Vulnerability

Microsoft Power BI Client JavaScript SDK Information Disclosure Vulnerability

Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.

Bouncy Castle crafted signature and public key can be used to trigger an infinite loop

Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")

Npgsql vulnerable to SQL Injection via Protocol Message Size Overflow

Umbraco Workflow's Backoffice users can execute arbitrary SQL

.NET Elevation of Privilege Vulnerability

SixLabors.ImageSharp vulnerable to data leakage

SixLabors.ImageSharp vulnerable to Memory Allocation with Excessive Size Value

Azure Identity Library for .NET Information Disclosure Vulnerability

WiX based installers are vulnerable to binary hijack when run as SYSTEM

Malicious directory junction can cause WiX RemoveFoldersEx to possibly delete elevated files

CoreWCF NetFraming based services can leave connections open when they should be closed

GHSA-2x7m-gf85-3745

Remote Denial of Service Vulnerability in Microsoft QUIC

Microsoft Security Advisory CVE-2024-21392: .NET Denial of Service Vulnerability

Use After Free in SixLabors.ImageSharp

NuGet Client Security Feature Bypass Vulnerability

Microsoft Security Advisory CVE-2024-21386: .NET Denial of Service Vulnerability

GHSA-8v28-3g86-chj5

PanelSwWix4.Sdk .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges

GHSA-259p-rvjx-ffwg

Panel::Software Customized WiX .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges

WiX Toolset's .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges

.NET Information Disclosure Vulnerability

GHSA-jcmq-5rrv-j2g4

PowerShell is subject to remote code execution vulnerability

TrueLayer.Client SSRF when fetching payment or payment provider

Microsoft ASP.NET Core project templates vulnerable to denial of service

Microsoft.Data.SqlClient and System.Data.SqlClient vulnerable to SQL Data Provider Security Feature Bypass

Microsoft.IdentityModel.Protocols.SignedHttpRequest remote code execution vulnerability

OWASP.AntiSamy mXSS when preserving comments

Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL)

pubnub Insufficient Entropy vulnerability

TinyMCE vulnerable to mutation Cross-site Scripting via special characters in unescaped text nodes

Microsoft Security Advisory CVE-2023-36049: .NET Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2023-36558: .NET Security Feature Bypass Vulnerability

TinyMCE XSS vulnerability in notificationManager.open API

TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin

Bunkum tokens cached in the AuthenticationService are susceptible to a use-after-free

MsQuic Remote Denial of Service Vulnerability

Remote Denial of Service Vulnerability in Microsoft.Native.Quic.MsQuic.Schannel

Azure Identity SDK Remote Code Execution Vulnerability

Microsoft Common Data Model SDK Denial of Service Vulnerability

GHSA-wqcr-xm43-hpqr

Vulnerable version of libwebp and can be exploited with a malicious source image

HtmlSanitizer vulnerable to Cross-site Scripting in Foreign Content

GHSA-7vpr-3ppw-qrpj

Imageflow affected by libwebp zero-day and should not be used with malicious source images.

Scan your dependencies for these CVEs