Ecosystem

NuGet

1,175 known vulnerabilities.

Most affected packages

Microsoft.ChakraCore 247 magick.net-q16-anycpu 165 magick.net-q16-hdri-anycpu 165 magick.net-q8-anycpu 165 Magick.NET-Q16-HDRI-x86 163 Magick.NET-Q16-x86 162 Magick.NET-Q8-x86 162 Magick.NET-Q16-HDRI-x64 160 Magick.NET-Q16-OpenMP-x64 160 Magick.NET-Q16-arm64 160 Magick.NET-Q16-OpenMP-arm64 160 Magick.NET-Q16-HDRI-OpenMP-arm64 160 Magick.NET-Q8-arm64 159 Magick.NET-Q8-OpenMP-arm64 159 Magick.NET-Q16-HDRI-arm64 159 magick.net-q8-openmp-x64 157 magick.net-q16-x64 156 magick.net-q8-x64 154 Magick.NET-Q16-HDRI-OpenMP-x64 95 Magick.NET-Q16-OpenMP-x86 68 Microsoft.NETCore.App.Runtime.win-x64 52 Microsoft.NETCore.App.Runtime.win-arm64 51 Microsoft.NETCore.App.Runtime.win-x86 51 Microsoft.AspNetCore.App.Runtime.win-x64 47 Microsoft.AspNetCore.App.Runtime.win-x86 46 Microsoft.NETCore.App.Runtime.linux-x64 44 Microsoft.NETCore.App.Runtime.linux-arm 43 Microsoft.NETCore.App.Runtime.linux-arm64 43 Microsoft.NETCore.App.Runtime.linux-musl-arm64 43 Microsoft.NETCore.App.Runtime.linux-musl-x64 43 Microsoft.AspNetCore.App.Runtime.win-arm64 43 Microsoft.AspNetCore.App.Runtime.linux-x64 42 Microsoft.NETCore.App.Runtime.osx-x64 41 Microsoft.AspNetCore.App.Runtime.linux-arm 41 Microsoft.AspNetCore.App.Runtime.linux-arm64 41 Microsoft.AspNetCore.App.Runtime.linux-musl-x64 41 Microsoft.AspNetCore.App.Runtime.osx-x64 41 Microsoft.NETCore.App.Runtime.linux-musl-arm 41 Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 40 Microsoft.AspNetCore.App.Runtime.linux-musl-arm 36

All Critical High Medium Low Exploited only Public exploit

607 results · Clear filters · Feed

High 7.5

CVE-2018-15812 Public exploit EPSS 47%

Insufficient Entropy in DotNetNuke

DNN (aka DotNetNuke) 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy.

DotNetNuke.Core NuGet

Jul 3, 2019
High 7.5

CVE-2018-15811 Exploited Public exploit Scanner template EPSS 76%

Inadequate Encryption Strength in DotNetNuke

DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.

DotNetNuke.Core NuGet

Jul 3, 2019
KEV Nov 3, 2021
High 7.5

CVE-2019-0981

Denial of service in ASP.NET Core

A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0980.

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Windows NuGet

May 16, 2019
High 7.5

CVE-2019-0980

Denial of service in ASP.NET Core

A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981.

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Windows NuGet

May 16, 2019
High 7.5

CVE-2019-0982

Denial of service in ASP.NET Core

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

Microsoft ASP.NET Core Microsoft.AspNetCore.SignalR.Protocols.MessagePack NuGet

May 16, 2019
High 7.5

CVE-2019-0937

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for x64-based Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0933

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for ARM64-based Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0913

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0914, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for 32-bit Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0925

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for x64-based Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0914

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for 32-bit Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0916

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for 32-bit Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0927

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for 32-bit Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0924

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for 32-bit Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0923

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…

Microsoft Microsoft Edge Microsoft Edge on Windows 10 Version 1903 for x64-based Systems Microsoft Edge on Windows 10 Version 1903 for 32-bit Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0917

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for 32-bit Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0922

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for 32-bit Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0911

Out-of-bounds write

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0884, CVE-2019-0918.

Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0912

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0913, CVE-2019-0914, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for 32-bit Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0915

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for x64-based Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0820

Regular Expression Denial of Service in System.Text.RegularExpressions

A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Windows NuGet

May 16, 2019
High 7.2

CVE-2019-11401

SiteServer CMS RCE via unsafe file upload

A issue was discovered in SiteServer CMS 6.9.0. It allows remote attackers to execute arbitrary code because an administrator can add the permitted file extension .aassp, which is converted to .asp because the "as" substring is deleted.

SSCMS NuGet

Apr 21, 2019
High 7.5

CVE-2019-0860 EPSS 11%

ChakraCore Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
High 7.5

CVE-2019-0861 EPSS 11%

ChakraCore Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
High 7.5

CVE-2019-0829

ChakraCore Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
High 7.5

CVE-2019-0810 EPSS 12%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0812, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
High 7.5

CVE-2019-0806

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0810, CVE-2019-0812, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
High 7.5

CVE-2019-0812 EPSS 19%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
High 7.5

CVE-2019-0771 EPSS 10%

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0639, CVE-2019-0680, CVE-…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
High 7.5

CVE-2019-0773 EPSS 10%

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0639, CVE-2019-0680, CVE-…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
High 7.5

CVE-2019-0769 EPSS 10%

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0639, CVE-2019-0680, CVE-…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
High 7.5

CVE-2019-0639 EPSS 12%

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0680, CVE-2019-0769, CVE-2019-07…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 8, 2019
High 7.5

CVE-2019-0611

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0592.

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 8, 2019
High 7.5

CVE-2019-0609

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0639, CVE-2019-0680, CVE-2019-0769, CVE-2…

Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet

Apr 8, 2019
High 7.5

CVE-2019-0592 EPSS 23%

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0611.

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 8, 2019
High 8.1

CVE-2019-0649

Chakra JIT server Privilege Escalation

A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileged Vulnerability'.

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Mar 6, 2019
High 7.5

CVE-2019-0567 Public exploit EPSS 80%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Jan 8, 2019
High 7.5

CVE-2019-0568 Public exploit EPSS 69%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Jan 8, 2019
High 7.5

CVE-2019-0539 Public exploit EPSS 83%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Jan 8, 2019
High 7.5

CVE-2019-0564

Denial of service in ASP.NET Core

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548.

Microsoft ASP.NET Core Microsoft.AspNetCore.All Microsoft.NETCore.App NuGet

Jan 8, 2019
High 7.5

CVE-2019-0545

Exposure of Sensitive Information in System.Net.Http

An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Mi…

Microsoft .NET Core Microsoft .NET Framework Microsoft.NETCore.App NuGet

Jan 8, 2019