Loading...

Sign in Get Started

Browse CVEs by Ecosystem and Severity

278 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.

All ecosystems npm pypi packagist maven go crates.io rubygems nuget

All severities critical high medium low KEV only

Clear all filters

Devolutions.XTS.NET Vulnerable to Timing Attack on GF Multiplications

HTTP Client uses incorrect token after refresh

ICG.AspNetCore.Utilities.CloudStorage's Secure Token Durations Different Than Expected

MPXJ has a Potential Path Traversal Vulnerability

Umbraco has a Potential Code Execution Risk When Viewing SVG Files in Full Screen in Backoffice

Security Update for the OPC UA .NET Standard Stack

CRLF Injection in RestSharp's `RestRequest.AddHeader` method

Serilog Client IP Spoofing vulnerability

Umbraco CMS Improper Access Control vulnerability

Microsoft Security Advisory CVE-2024-38167 | .NET Information Disclosure Vulnerability

IdentityServer Open Redirect vulnerability

SixLabors ImageSharp has Excessive Memory Allocation in Gif Decoder

TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option

TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

Umbraco Commerce vulnerable to Stored Cross-site Scripting on Print Functionality

Umbraco CMS Open Redirect Bypass Protection

Microsoft Security Advisory CVE-2024-30046 | .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2024-30045 | .NET Remote code Execution Vulnerability

Microsoft Power BI Client JavaScript SDK Information Disclosure Vulnerability

Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.

Bouncy Castle crafted signature and public key can be used to trigger an infinite loop

Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")

Umbraco Workflow's Backoffice users can execute arbitrary SQL

SixLabors.ImageSharp vulnerable to data leakage

SixLabors.ImageSharp vulnerable to Memory Allocation with Excessive Size Value

Azure Identity Library for .NET Information Disclosure Vulnerability

.NET Information Disclosure Vulnerability

Microsoft ASP.NET Core project templates vulnerable to denial of service

OWASP.AntiSamy mXSS when preserving comments

Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL)

pubnub Insufficient Entropy vulnerability

TinyMCE vulnerable to mutation Cross-site Scripting via special characters in unescaped text nodes

Microsoft Security Advisory CVE-2023-36558: .NET Security Feature Bypass Vulnerability

TinyMCE XSS vulnerability in notificationManager.open API

TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin

Bunkum tokens cached in the AuthenticationService are susceptible to a use-after-free

Microsoft Common Data Model SDK Denial of Service Vulnerability

HtmlSanitizer vulnerable to Cross-site Scripting in Foreign Content

Microsoft Security Advisory CVE-2023-36799: .NET Denial of Service Vulnerability

SSCMS vulnerable to Cross Site Scripting

Exposure of Sensitive Information in OPC UA .NET Standard Reference Server

Cross-site scripting vulnerability in TinyMCE alerts

.NET Information Disclosure Vulnerability

.NET Core Information Disclosure Vulnerability

.NET Remote Code Execution Vulnerability

jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label

CVE-2019-1010199

Cross site scripting attack in ServiceStack Framework

Denial of service in .NET core

Integer overflow in the bundled Brotli C library

Scan your dependencies for these CVEs