Skip to content
OpenAdvisories

Ecosystem

NuGet

1,175 known vulnerabilities.

Most affected packages

Microsoft.ChakraCore 247 magick.net-q16-anycpu 165 magick.net-q16-hdri-anycpu 165 magick.net-q8-anycpu 165 Magick.NET-Q16-HDRI-x86 163 Magick.NET-Q16-x86 162 Magick.NET-Q8-x86 162 Magick.NET-Q16-HDRI-x64 160 Magick.NET-Q16-OpenMP-x64 160 Magick.NET-Q16-arm64 160 Magick.NET-Q16-OpenMP-arm64 160 Magick.NET-Q16-HDRI-OpenMP-arm64 160 Magick.NET-Q8-arm64 159 Magick.NET-Q8-OpenMP-arm64 159 Magick.NET-Q16-HDRI-arm64 159 magick.net-q8-openmp-x64 157 magick.net-q16-x64 156 magick.net-q8-x64 154 Magick.NET-Q16-HDRI-OpenMP-x64 95 Magick.NET-Q16-OpenMP-x86 68 Microsoft.NETCore.App.Runtime.win-x64 52 Microsoft.NETCore.App.Runtime.win-arm64 51 Microsoft.NETCore.App.Runtime.win-x86 51 Microsoft.AspNetCore.App.Runtime.win-x64 47 Microsoft.AspNetCore.App.Runtime.win-x86 46 Microsoft.NETCore.App.Runtime.linux-x64 44 Microsoft.NETCore.App.Runtime.linux-arm 43 Microsoft.NETCore.App.Runtime.linux-arm64 43 Microsoft.NETCore.App.Runtime.linux-musl-arm64 43 Microsoft.NETCore.App.Runtime.linux-musl-x64 43 Microsoft.AspNetCore.App.Runtime.win-arm64 43 Microsoft.AspNetCore.App.Runtime.linux-x64 42 Microsoft.NETCore.App.Runtime.osx-x64 41 Microsoft.AspNetCore.App.Runtime.linux-arm 41 Microsoft.AspNetCore.App.Runtime.linux-arm64 41 Microsoft.AspNetCore.App.Runtime.linux-musl-x64 41 Microsoft.AspNetCore.App.Runtime.osx-x64 41 Microsoft.NETCore.App.Runtime.linux-musl-arm 41 Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 40 Microsoft.AspNetCore.App.Runtime.linux-musl-arm 36
All Critical High Medium Low Exploited only Public exploit

607 results · Clear filters · Feed

  • High 7.5
    CVE-2017-11807

    ChakraCore RCE Vulnerability

    ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-11796

    ChakraCore RCE Vulnerability

    ChakraCore and Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-11805

    ChakraCore RCE Vulnerability

    ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-11821

    ChakraCore RCE Vulnerability

    ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-11801

    ChakraCore RCE Vulnerability

    ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-…

    Microsoft ChakraCore Microsoft.ChakraCore NuGet
  • High 7.5
    CVE-2017-11806

    ChakraCore RCE Vulnerability

    ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 8.8
    CVE-2015-5237

    protobuf susceptible to buffer overflow

    protobuf allows remote authenticated attackers to cause a heap-based buffer overflow.

    protobuf protobuf protobuf google/protobuf Debian Ubuntu Packagist Maven PyPI Go NuGet
  • High 8.8
    CVE-2017-9822 Exploited · Ransomware Public exploit Scanner template EPSS 95%

    DNN (aka DotNetNuke) has Remote Code Execution via a cookie

    DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."

    DotNetNuke DotNetNuke CMS Fixed in 9.1.1 DotNetNuke.Core NuGet
    KEV Nov 3, 2021
  • High 7.5
    CVE-2017-8585

    Improper Input Validation in Microsoft.NETCore.App

    Microsoft .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7 allow an attacker to send specially crafted requests to a .NET web application, resulting in denial of service, aka .NET Denial of Service Vulnerability.

    Microsoft Microsoft .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7 Microsoft.NETCore.App NuGet
  • High 7.5
    CVE-2017-0235 EPSS 11%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0224, CVE-2017-022…

    Microsoft Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-0224 EPSS 11%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way JavaScript engines render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0228, CVE-2017-0229, CVE-2017-0230…

    Microsoft Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-0247 EPSS 17%

    ASP.NET Core fails to properly validate web requests

    A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party claims that the issue is that the TextEncoder.EncodeCore function in the System.Text.Encodings.Web package…

    Microsoft ASP.NET Core Microsoft.AspNetCore.Mvc.Core System.Text.Encodings.Web NuGet
  • High 7.5
    CVE-2017-0234 EPSS 38%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0224, CVE-2017-022…

    Microsoft Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.3
    CVE-2017-0249

    High severity vulnerability that affects Microsoft.AspNetCore.Mvc

    An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.

    Microsoft ASP.NET Core Microsoft.AspNetCore.Mvc.Core Microsoft.AspNetCore.Mvc.Cors NuGet
  • High 7.5
    CVE-2017-0236 EPSS 32%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0224, CVE-2017-022…

    Microsoft Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 8.2
    CVE-2015-8813 Scanner template EPSS 11%

    Umbraco CMS vulnerable to CSRF

    The Page_Load function in Umbraco.Web/umbraco.presentation/umbraco/dashboard/FeedProxy.aspx.cs in Umbraco before 7.4.0 allows remote attackers to conduct server-side request forgery (SSRF) attacks via the url parameter.

    Umbraco.Cms NuGet
  • High 8.8
    CVE-2015-8814

    Umbraco CMS vulnerable to CSRF

    Umbraco before 7.4.0 allows remote attackers to bypass anti-forgery security measures and conduct cross-site request forgery (CSRF) attacks as demonstrated by editing user account information in the templates.asmx.cs file.

    Umbraco.Cms NuGet
  • High 7.5
    CVE-2016-7203 Public exploit EPSS 65%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerabili…

    Microsoft.ChakraCore NuGet
  • High 7.5
    CVE-2016-7202 Public exploit EPSS 74%

    ChakraCore RCE Vulnerability

    The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerabilit…

    Microsoft.ChakraCore NuGet
  • High 7.5
    CVE-2016-7243 EPSS 15%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerabili…

    Microsoft.ChakraCore NuGet
  • High 8.8
    CVE-2016-7200 Exploited Public exploit EPSS 83%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerabili…

    Microsoft.ChakraCore NuGet
    KEV Mar 28, 2022
  • High 8.8
    CVE-2016-7201 Exploited Public exploit EPSS 80%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerabili…

    Microsoft.ChakraCore NuGet
    KEV Mar 28, 2022
  • High 7.5
    CVE-2016-7240 Public exploit EPSS 66%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerabili…

    Microsoft.ChakraCore NuGet
  • High 7.5
    CVE-2016-7208 EPSS 15%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerabili…

    Microsoft.ChakraCore NuGet
  • High 7.5
    CVE-2016-7242 EPSS 16%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerabili…

    Microsoft.ChakraCore NuGet
  • High 7.5
    CVE-2016-7190 Public exploit EPSS 67%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…

    Microsoft.ChakraCore NuGet
  • High 7.5
    CVE-2016-7194 Public exploit EPSS 58%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…

    Microsoft.ChakraCore NuGet
  • High 7.5
    CVE-2016-7189 Public exploit EPSS 48%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Remote Code Execution Vulnerability."

    Microsoft.ChakraCore NuGet
  • High 7.5
    CVE-2016-3382 EPSS 17%

    ChakraCore RCE Vulnerability

    The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka…

    Microsoft.ChakraCore NuGet
  • High 7.5
    CVE-2016-3386 Public exploit EPSS 41%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…

    Microsoft.ChakraCore NuGet
  • High 7.5
    CVE-2016-3389 EPSS 15%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…

    Microsoft.ChakraCore NuGet
  • High 7.5
    CVE-2016-3390 EPSS 17%

    ChakraCore RCE Vulnerability

    The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scriptin…

    Microsoft.ChakraCore NuGet
  • High 7.5
    CVE-2016-3350 EPSS 15%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…

    Microsoft.ChakraCore NuGet
  • High 7.5
    CVE-2016-3377 EPSS 16%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…

    Microsoft.ChakraCore NuGet
  • High 7.5
    CVE-2016-3296 EPSS 15%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."

    Microsoft.ChakraCore NuGet
  • High 8.8
    CVE-2016-3269 EPSS 21%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…

    Microsoft.ChakraCore NuGet
  • High 8.8
    CVE-2016-3248 EPSS 24%

    ChakraCore RCE Vulnerability

    The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corrup…

    Microsoft.ChakraCore NuGet
  • High 8.8
    CVE-2016-3260 EPSS 24%

    ChakraCore RCE Vulnerability

    The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via …

    Microsoft.ChakraCore NuGet
  • High 8.8
    CVE-2016-3265 EPSS 21%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…

    Microsoft.ChakraCore NuGet
  • High 8.8
    CVE-2016-3259 EPSS 35%

    ChakraCore RCE Vulnerability

    The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corrup…

    Microsoft.ChakraCore NuGet