Browse CVEs by Ecosystem and Severity

AspNetCore Remote Authenticator for CIE3.0 Allows SAML Response Signature Verification Bypass

The AspNetCore Remote Authenticator for SPID Allows SAML Response Signature Verification Bypass

TShock allows chat while not fully connected, possible ban evasion

Snowflake.Data has weak temporary files permissions

XSS/HTML Injection Vulnerability in Umbraco Preview Badge

Umbraco Allows User Enumeration Feasible Based On Management API Timing and Response Codes

XSS/HTML Injection Vulnerability in Umbraco Backoffice Components

Microsoft Security Advisory CVE-2025-21176 | .NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2025-21172 | .NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2025-21171 | .NET Remote Code Execution Vulnerability

Umbraco Forms's Short and Long Answer Fields Are Not Validated Server-Side For Maximum Length

Git Credential Manager carriage-return character in remote URL allows malicious repository to leak credentials

Oqtane Framework Insecure Direct Object Reference vulnerability

Oqtane Framework Incorrect Access Control vulnerability

Oqtane Framework Insecure Direct Object Reference vulnerability

TShock Security Escalation Exploit

Devolutions.XTS.NET Vulnerable to Timing Attack on GF Multiplications

DotNetZip Directory Traversal vulnerability

.NET Remote Code Execution Vulnerability

.NET Denial of Service Vulnerability

HTTP Client uses incorrect token after refresh

CRLF injection in Refit's [Header], [HeaderCollection] and [Authorize] attributes

Apache Lucene.Net.Replicator Deserialization of Untrusted Data vulnerability

ICG.AspNetCore.Utilities.CloudStorage's Secure Token Durations Different Than Expected

MPXJ has a Potential Path Traversal Vulnerability

Umbraco has a Potential Code Execution Risk When Viewing SVG Files in Full Screen in Backoffice

Security Update for the OPC UA .NET Standard Stack

Security Update for the OPC UA .NET Standard Stack

Microsoft Security Advisory CVE-2024-43485 | .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2024-43484 | .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2024-43483 | .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2024-38229 | .NET Remote Code Execution Vulnerability

CRLF Injection in RestSharp's `RestRequest.AddHeader` method

Serilog Client IP Spoofing vulnerability

Umbraco CMS Improper Access Control vulnerability

Microsoft Security Advisory CVE-2024-38168 | .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2024-38167 | .NET Information Disclosure Vulnerability

IdentityServer Open Redirect vulnerability

tgstation-server's DreamMaker environment files outside the deployment directory can be compiled and ran by insufficiently permissioned users

CLSA Directory Traversal vulnerability

SixLabors ImageSharp has Excessive Memory Allocation in Gif Decoder

SixLabors ImageSharp Out-of-bounds Write

Mimekit has vulnerable dependency that can lead to denial of service

Microsoft Security Advisory CVE-2024-38095 | .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2024-38081 | .NET Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2024-35264 | .NET Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2024-30105 | .NET Denial of Service Vulnerability

NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities

OPCFoundation.NetStandard.Opc.Ua.Core buffer-management vulnerability

TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option