Ecosystem

NuGet

1,175 known vulnerabilities.

Most affected packages

Microsoft.ChakraCore 247 magick.net-q16-anycpu 165 magick.net-q16-hdri-anycpu 165 magick.net-q8-anycpu 165 Magick.NET-Q16-HDRI-x86 163 Magick.NET-Q16-x86 162 Magick.NET-Q8-x86 162 Magick.NET-Q16-HDRI-x64 160 Magick.NET-Q16-OpenMP-x64 160 Magick.NET-Q16-arm64 160 Magick.NET-Q16-OpenMP-arm64 160 Magick.NET-Q16-HDRI-OpenMP-arm64 160 Magick.NET-Q8-arm64 159 Magick.NET-Q8-OpenMP-arm64 159 Magick.NET-Q16-HDRI-arm64 159 magick.net-q8-openmp-x64 157 magick.net-q16-x64 156 magick.net-q8-x64 154 Magick.NET-Q16-HDRI-OpenMP-x64 95 Magick.NET-Q16-OpenMP-x86 68 Microsoft.NETCore.App.Runtime.win-x64 52 Microsoft.NETCore.App.Runtime.win-arm64 51 Microsoft.NETCore.App.Runtime.win-x86 51 Microsoft.AspNetCore.App.Runtime.win-x64 47 Microsoft.AspNetCore.App.Runtime.win-x86 46 Microsoft.NETCore.App.Runtime.linux-x64 44 Microsoft.NETCore.App.Runtime.linux-arm 43 Microsoft.NETCore.App.Runtime.linux-arm64 43 Microsoft.NETCore.App.Runtime.linux-musl-arm64 43 Microsoft.NETCore.App.Runtime.linux-musl-x64 43 Microsoft.AspNetCore.App.Runtime.win-arm64 43 Microsoft.AspNetCore.App.Runtime.linux-x64 42 Microsoft.NETCore.App.Runtime.osx-x64 41 Microsoft.AspNetCore.App.Runtime.linux-arm 41 Microsoft.AspNetCore.App.Runtime.linux-arm64 41 Microsoft.AspNetCore.App.Runtime.linux-musl-x64 41 Microsoft.AspNetCore.App.Runtime.osx-x64 41 Microsoft.NETCore.App.Runtime.linux-musl-arm 41 Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 40 Microsoft.AspNetCore.App.Runtime.linux-musl-arm 36

All Critical High Medium Low Exploited only Public exploit

607 results · Clear filters · Feed

High 7.5

CVE-2018-8618 EPSS 11%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Dec 12, 2018
High 7.5

CVE-2018-8583 EPSS 11%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Dec 12, 2018
High 7.5

CVE-2018-8624 EPSS 13%

ChakraCore Remote code execution Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Dec 12, 2018
High 7.5

CVE-2018-8617 Public exploit EPSS 62%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Dec 12, 2018
High 7.5

CVE-2018-8629 EPSS 23%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Dec 12, 2018
High 7.5

CVE-2018-8542 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Nov 14, 2018
High 7.5

CVE-2018-8557 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Nov 14, 2018
High 7.5

CVE-2018-8543 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Nov 14, 2018
High 7.5

CVE-2018-8541 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Nov 14, 2018
High 7.5

CVE-2018-8555 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Nov 14, 2018
High 7.5

CVE-2018-8551 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Nov 14, 2018
High 7.5

CVE-2018-8556 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Nov 14, 2018
High 7.5

CVE-2018-8588 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Nov 14, 2018
High 7.5

CVE-2018-8513 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Oct 10, 2018
High 7.5

CVE-2018-8292 EPSS 15%

.NET Core Information Disclosure

An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core…

Microsoft .NET Core PowerShell Core System.Net.Http NuGet

Oct 10, 2018
High 7.5

CVE-2018-8510 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Oct 10, 2018
High 7.5

CVE-2018-8511 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Oct 10, 2018
High 7.5

CVE-2018-8503 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Oct 10, 2018
High 7.5

CVE-2018-8505 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Oct 10, 2018
High 8.3

CVE-2018-17107

tgstation-server cached user logins in legacy server

In Tgstation tgstation-server 3.2.4.0 through 3.2.1.0 (fixed in 3.2.5.0), active logins would be cached, allowing subsequent logins to succeed with any username or password.

TGServiceInterface NuGet

Sep 24, 2018
High 7.5

CVE-2018-12086 Public exploit EPSS 12%

High severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua

Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.

wireshark wireshark OPCFoundation.NetStandard.Opc.Ua Debian Alpine NuGet

Sep 14, 2018
High 7.5

CVE-2018-8391 EPSS 11%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8354, CVE-2018-8456, C…

Microsoft ChakraCore Microsoft.ChakraCore NuGet

Sep 13, 2018
High 7.5

CVE-2018-8367 EPSS 15%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Sep 13, 2018
High 7.5

CVE-2018-8465 EPSS 15%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Sep 13, 2018
High 7.5

CVE-2018-8459 EPSS 15%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8354, …

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Sep 13, 2018
High 7.5

CVE-2018-8354 EPSS 15%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Sep 13, 2018
High 7.5

CVE-2018-8467 Public exploit EPSS 69%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Sep 13, 2018
High 7.5

CVE-2018-8466 Public exploit EPSS 69%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Sep 13, 2018
High 7.5

CVE-2018-8456 EPSS 15%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8354, …

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Sep 13, 2018
High 7.5

CVE-2018-8269 Public exploit EPSS 27%

Denial of service in ASP.NET Core

A denial of service vulnerability exists when OData Library improperly handles web requests, aka "OData Denial of Service Vulnerability." This affects Microsoft.Data.OData.

Microsoft Microsoft.Data.OData Microsoft.AspNetCore.All Microsoft.AspNetCore.DataProtection.AzureStorage NuGet

Sep 13, 2018
High 7.5

CVE-2018-8409

Denial of service vulnerability exists when System.IO.Pipelines improperly handles requests

A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1.

Microsoft ASP.NET Core .NET Core System.IO.Pipelines NuGet

Sep 13, 2018
High 8.8

CVE-2018-15121

Auth0-ASPNET and Auth0-ASPNET-Owin vulnerable to Cross-Site Request Forgery

An issue was discovered in Auth0 auth0-aspnet and auth0-aspnet-owin. Affected packages do not use or validate the state parameter of the OAuth 2.0 and OpenID Connect protocols. This leaves applications vulnerable to CSRF attacks during authentication and auth…

auth0-aspnet Auth0-ASPNET-Owin NuGet

Aug 29, 2018
High 7.5

CVE-2018-8384 Public exploit EPSS 64%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8…

Microsoft ChakraCore Microsoft.ChakraCore NuGet

Aug 15, 2018
High 7.5

CVE-2018-8390 EPSS 15%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8353, …

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Aug 15, 2018
High 7.5

CVE-2018-8371 EPSS 15%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer…

Microsoft Internet Explorer 11 Internet Explorer 10 Internet Explorer 9 NuGet

Aug 15, 2018
High 7.5

CVE-2018-8372 EPSS 26%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is…

Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet

Aug 15, 2018
High 7.5

CVE-2018-8381 EPSS 15%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Aug 15, 2018
High 7.5

CVE-2018-8266 EPSS 29%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Aug 15, 2018
High 7.5

CVE-2018-8359 EPSS 15%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, C…

Microsoft ChakraCore Microsoft.ChakraCore NuGet

Aug 15, 2018
High 7.5

CVE-2018-8355 Public exploit EPSS 68%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is…

Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet

Aug 15, 2018