Loading...

Sign in Get Started

Browse CVEs by Ecosystem and Severity

278 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.

All ecosystems npm pypi packagist maven go crates.io rubygems nuget

All severities critical high medium low KEV only

Clear all filters

ImageMagick: Information Disclosure in distributed pixel cache server because it is not using a challenge–response authentication model

ImageMagick: Race Condition in distributed pixel cache server can result in file descriptor hijacking

ImageMagick: Heap Buffer Over-Write in distributed pixel cache server

GHSA-jqq5-8px3-9m6m

ImageMagick: Heap Buffer Over-Write in json and yaml encoder of a single byte due to incorrect fix

Umbraco.Cms: XSS/HTML Injection in Umbraco Backoffice confirmation dialog

Umbraco.Cms: Open Redirect Vulnerability in Surface Controllers

OpenMcdf: Uncatchable infinite loop in DirectoryTree.TryGetDirectoryEntry on crafted CFB directory cycle

ImageMagick: Heap Buffer Over-Write of a single byte in the JP2 encoder.

ImageMagick: Stack overflow in fx operation

ImageMagick: Use-After-Free in MSL decoder.

ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression

ImageMagick: Policy Bypass in MNG coder could

ImageMagick: Heap Buffer Over-Read of a 4 bytes in distort operation.

ImageMagick: Policy Bypass in PSD decoder

ImageMagick: Out-of-Bounds Read of a single byte in meta encoder

ImageMagick: Out-of-Bounds Read in connected components when the user supplies an invalid keep-top define

GHSA-5r97-79vw-qvm4

Microsoft DirectX12: .spritefont multiply overflow only in 32-bit builds

GHSA-c55g-rp4x-fx84

Microsoft DirectX: .spritefont multiply overflow only in 32-bit builds

ImageMagick: Heap Buffer Over-Read in IPTC encoder

SharpCompress has directory traversal via directory entries in WriteToDirectory (zip slip variant)

OpenTelemetry.Exporter.Instana bypasses TLS certificate validation when a proxy is configured

OpAMP client reads unbounded HTTP response bodies

OpenTelemetry's disk retry default temp path enables local blob injection via OTLP Exporter

OneCollector exporter reads unbounded HTTP response bodies

OpenTelemetry.Resources.Azure has an unbounded HTTP response body read

OpenTelemetry's Zipkin remote endpoint cache could grow without bounds and increase memory pressure

ParquetSharp: Possible Stack Overflow When Reading a ParquetFile with Large Decimal Type Width

OpenTelemetry.Sampler.AWS & OpenTelemetry.Resources.AWS have unbounded HTTP response body reads

OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers

OpenTelemetry dotnet: Unbounded `grpc-status-details-bin` parsing in OTLP/gRPC retry handling

OpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodies

OpenMcdf has an Infinite loop DoS via crafted CFB directory cycle

MailKit has STARTTLS Response Injection via unflushed stream buffer that enables SASL mechanism downgrade

OpenTelemetry .NET has potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion path

GHSA-98cp-rj9f-6v5g

ImageMagick has has a stack-buffer-overflow in MNG encoder with oversized pallete

ImageMagick has an off-by-one error in MSL decoder could result in crash

ImageMagick has a heap-use-after-free via XMP profile could result in a crash when printing the values.

ImageMagick has a heap out-of-bounds write in JP2 encoder

ImageMagick has a heap buffer overflow when encoding JXL image with a 16-bit float

ImageMagick has a heap buffer overflow (WRITE) in the YAML and JSON encoders.

ImageMagick has an out-of-bounds read in sample operation

ImageMagick has a Stack Overflow via Recursive FX Expression Parsing

ImageMagick has a heap-Buffer-Overflow write of a single zero byte when parsing xml.

ImageMagick has an integer overflow in despeckle operation causing a heap buffer overflow on 32-bit builds

ImageMagick has a heap overflow caused by integer overflow/wraparound in viff encoder on 32-bit builds

DNN: Same HostGUID for all new installs

Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden characters

ImageMagick has an Out-of-bounds Write via InterpretImageFilename

ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction

Scriban has Multiple Denial-of-Service Vectors via Unbounded Resource Consumption During Expression Evaluation

Scan your dependencies for these CVEs