Browse CVEs by Ecosystem and Severity

Microsoft Security Advisory CVE-2025-21171 | .NET Remote Code Execution Vulnerability

Git Credential Manager carriage-return character in remote URL allows malicious repository to leak credentials

Oqtane Framework Incorrect Access Control vulnerability

TShock Security Escalation Exploit

DotNetZip Directory Traversal vulnerability

.NET Denial of Service Vulnerability

Apache Lucene.Net.Replicator Deserialization of Untrusted Data vulnerability

Security Update for the OPC UA .NET Standard Stack

Microsoft Security Advisory CVE-2024-43485 | .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2024-43484 | .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2024-43483 | .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2024-38229 | .NET Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2024-38168 | .NET Denial of Service Vulnerability

tgstation-server's DreamMaker environment files outside the deployment directory can be compiled and ran by insufficiently permissioned users

SixLabors ImageSharp Out-of-bounds Write

Mimekit has vulnerable dependency that can lead to denial of service

Microsoft Security Advisory CVE-2024-38095 | .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2024-38081 | .NET Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2024-30105 | .NET Denial of Service Vulnerability

NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities

OPCFoundation.NetStandard.Opc.Ua.Core buffer-management vulnerability

Azure Storage Movement Client Library Denial of Service Vulnerability

Npgsql vulnerable to SQL Injection via Protocol Message Size Overflow

.NET Elevation of Privilege Vulnerability

WiX based installers are vulnerable to binary hijack when run as SYSTEM

Malicious directory junction can cause WiX RemoveFoldersEx to possibly delete elevated files

CoreWCF NetFraming based services can leave connections open when they should be closed

Remote Denial of Service Vulnerability in Microsoft QUIC

Microsoft Security Advisory CVE-2024-21392: .NET Denial of Service Vulnerability

Use After Free in SixLabors.ImageSharp

Microsoft Security Advisory CVE-2024-21386: .NET Denial of Service Vulnerability

PanelSwWix4.Sdk .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges

Panel::Software Customized WiX .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges

WiX Toolset's .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges

PowerShell is subject to remote code execution vulnerability

TrueLayer.Client SSRF when fetching payment or payment provider

Microsoft.Data.SqlClient and System.Data.SqlClient vulnerable to SQL Data Provider Security Feature Bypass

Microsoft.IdentityModel.Protocols.SignedHttpRequest remote code execution vulnerability

Microsoft Security Advisory CVE-2023-36049: .NET Elevation of Privilege Vulnerability

MsQuic Remote Denial of Service Vulnerability

Remote Denial of Service Vulnerability in Microsoft.Native.Quic.MsQuic.Schannel

Azure Identity SDK Remote Code Execution Vulnerability

Vulnerable version of libwebp and can be exploited with a malicious source image

Imageflow affected by libwebp zero-day and should not be used with malicious source images.

Sustainsys.Saml2 Insufficient Identity Provider Issuer Validation

Microsoft Security Advisory CVE-2023-36792: .NET Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2023-36794: .NET Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2023-36793: .NET Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2023-36796: .NET Remote Code Execution Vulnerability

libwebp: OOB write in BuildHuffmanTable