Ecosystem

NuGet

1,175 known vulnerabilities.

Most affected packages

Microsoft.ChakraCore 247 magick.net-q16-anycpu 165 magick.net-q16-hdri-anycpu 165 magick.net-q8-anycpu 165 Magick.NET-Q16-HDRI-x86 163 Magick.NET-Q16-x86 162 Magick.NET-Q8-x86 162 Magick.NET-Q16-HDRI-x64 160 Magick.NET-Q16-OpenMP-x64 160 Magick.NET-Q16-arm64 160 Magick.NET-Q16-OpenMP-arm64 160 Magick.NET-Q16-HDRI-OpenMP-arm64 160 Magick.NET-Q8-arm64 159 Magick.NET-Q8-OpenMP-arm64 159 Magick.NET-Q16-HDRI-arm64 159 magick.net-q8-openmp-x64 157 magick.net-q16-x64 156 magick.net-q8-x64 154 Magick.NET-Q16-HDRI-OpenMP-x64 95 Magick.NET-Q16-OpenMP-x86 68 Microsoft.NETCore.App.Runtime.win-x64 52 Microsoft.NETCore.App.Runtime.win-arm64 51 Microsoft.NETCore.App.Runtime.win-x86 51 Microsoft.AspNetCore.App.Runtime.win-x64 47 Microsoft.AspNetCore.App.Runtime.win-x86 46 Microsoft.NETCore.App.Runtime.linux-x64 44 Microsoft.NETCore.App.Runtime.linux-arm 43 Microsoft.NETCore.App.Runtime.linux-arm64 43 Microsoft.NETCore.App.Runtime.linux-musl-arm64 43 Microsoft.NETCore.App.Runtime.linux-musl-x64 43 Microsoft.AspNetCore.App.Runtime.win-arm64 43 Microsoft.AspNetCore.App.Runtime.linux-x64 42 Microsoft.NETCore.App.Runtime.osx-x64 41 Microsoft.AspNetCore.App.Runtime.linux-arm 41 Microsoft.AspNetCore.App.Runtime.linux-arm64 41 Microsoft.AspNetCore.App.Runtime.linux-musl-x64 41 Microsoft.AspNetCore.App.Runtime.osx-x64 41 Microsoft.NETCore.App.Runtime.linux-musl-arm 41 Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 40 Microsoft.AspNetCore.App.Runtime.linux-musl-arm 36

All Critical High Medium Low Exploited only Public exploit

1,175 results · Feed

High 7.5

CVE-2019-0923

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…

Microsoft Microsoft Edge Microsoft Edge on Windows 10 Version 1903 for 32-bit Systems Microsoft Edge on Windows 10 Version 1903 for ARM64-based Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0917

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for x64-based Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0922

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for 32-bit Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0911

Out-of-bounds write

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0884, CVE-2019-0918.

Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0912

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0913, CVE-2019-0914, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for x64-based Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0915

Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft Edge on Windows 10 Version 1903 for ARM64-based Systems Windows Browsers NuGet

May 16, 2019
High 7.5

CVE-2019-0820

Regular Expression Denial of Service in System.Text.RegularExpressions

A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Windows NuGet

May 16, 2019
High 7.2

CVE-2019-11401

SiteServer CMS RCE via unsafe file upload

A issue was discovered in SiteServer CMS 6.9.0. It allows remote attackers to execute arbitrary code because an administrator can add the permitted file extension .aassp, which is converted to .asp because the "as" substring is deleted.

SSCMS NuGet

Apr 21, 2019
Medium 6.1

CVE-2019-11358 Public exploit EPSS 87%

XSS in jQuery as used in Drupal, Backdrop CMS, and other products

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Obj…

mediawiki mediawiki django drupal/core Debian Ubuntu Azure Linux Alpine npm Packagist Maven PyPI NuGet RubyGems

Apr 19, 2019
Critical 9.8

CVE-2019-9845

MadsKristensen.AspNetCore.Miniblog subject to Improper Input Validation

madskristensen Miniblog.Core through 2019-01-16 allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL, because SaveFilesToDisk in Controllers/BlogController.cs writes a decoded base64 string to a file without validating th…

MadsKristensen.AspNetCore.Miniblog NuGet

Apr 16, 2019
Critical 9.8

CVE-2019-7644

Critical severity vulnerability that affects Auth0-WCF-Service-JWT

Auth0 Auth0-WCF-Service-JWT before 1.0.4 leaks the expected JWT signature in an error message when it cannot successfully validate the JWT signature. If this error message is presented to an attacker, they can forge an arbitrary JWT token that will be accepte…

Auth0-WCF-Service-JWT NuGet

Apr 11, 2019
High 7.5

CVE-2019-0860 EPSS 11%

ChakraCore Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
High 7.5

CVE-2019-0861 EPSS 11%

ChakraCore Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
High 7.5

CVE-2019-0829

ChakraCore Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
High 7.5

CVE-2019-0810 EPSS 12%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0812, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
High 7.5

CVE-2019-0806

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0810, CVE-2019-0812, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
High 7.5

CVE-2019-0812 EPSS 19%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
High 7.5

CVE-2019-0771 EPSS 10%

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0639, CVE-2019-0680, CVE-…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
High 7.5

CVE-2019-0773 EPSS 10%

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0639, CVE-2019-0680, CVE-…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
High 7.5

CVE-2019-0769 EPSS 10%

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0639, CVE-2019-0680, CVE-…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
Medium 6.5

CVE-2019-0746

Microsoft.ChakraCore vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'.

Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet

Apr 8, 2019
High 7.5

CVE-2019-0639 EPSS 12%

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0680, CVE-2019-0769, CVE-2019-07…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 8, 2019
High 7.5

CVE-2019-0611

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0592.

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 8, 2019
High 7.5

CVE-2019-0609

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0639, CVE-2019-0680, CVE-2019-0769, CVE-2…

Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet

Apr 8, 2019
High 7.5

CVE-2019-0592 EPSS 23%

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0611.

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 8, 2019
Medium 5.3

CVE-2019-9648 Public exploit EPSS 14%

CoreFTP Directory Traversal

An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. A directory traversal vulnerability exists using the SIZE command along with a \..\..\ substring, allowing an attacker to enumerate file existence based on the returned informatio…

CoreFtp NuGet

Mar 22, 2019
Medium 6.1

CVE-2018-14486

DNN XSS Vulnerability

DNN (formerly DotNetNuke) 9.1.1 allows cross-site scripting (XSS) via XML.

DotNetNuke.Core NuGet

Mar 17, 2019
High 8.1

CVE-2019-0649

Chakra JIT server Privilege Escalation

A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileged Vulnerability'.

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Mar 6, 2019
Medium 4.3

CVE-2019-0648

ChakraCore information disclosure vulnerability

An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data.To exploit the vulnerability, an attacker must know …

Microsoft Microsoft Edge Microsoft.ChakraCore Browsers NuGet

Mar 6, 2019
Medium 5.9

CVE-2019-0657

Improper Input Validation in .Net Framework API's

A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 NuGet

Mar 6, 2019
Medium 6.1

CVE-2019-8331 Public exploit EPSS 16%

Bootstrap Vulnerable to Cross-Site Scripting

In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.

ceph fluent-bit pytorch ntopng Debian Ubuntu Azure Linux npm Packagist Maven NuGet RubyGems

Feb 20, 2019
Medium 6.1

CVE-2018-20676

XSS vulnerability that affects bootstrap

In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.

twitter-bootstrap3 bootstrap twitter-bootstrap3 bootstrap Debian Ubuntu npm Packagist Maven NuGet RubyGems

Jan 9, 2019
Medium 6.1

CVE-2018-20677

bootstrap Cross-site Scripting vulnerability

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

ceph fluent-bit pytorch twitter-bootstrap3 Debian Ubuntu Azure Linux npm Packagist Maven NuGet RubyGems

Jan 9, 2019
Medium 6.1

CVE-2016-10735 Public exploit

Bootstrap Cross-site Scripting vulnerability

In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.

bootstrap twitter-bootstrap3 twitter-bootstrap3 org.webjars:bootstrap Debian Ubuntu npm Packagist Maven NuGet RubyGems

Jan 9, 2019
High 7.5

CVE-2019-0567 Public exploit EPSS 80%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Jan 8, 2019
High 7.5

CVE-2019-0568 Public exploit EPSS 69%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Jan 8, 2019
High 7.5

CVE-2019-0539 Public exploit EPSS 83%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Jan 8, 2019
High 7.5

CVE-2019-0564

Denial of service in ASP.NET Core

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548.

Microsoft ASP.NET Core Microsoft.NETCore.App Microsoft.AspNetCore.All NuGet

Jan 8, 2019
High 7.5

CVE-2019-0545

Exposure of Sensitive Information in System.Net.Http

An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Mi…

Microsoft .NET Core Microsoft .NET Framework Microsoft.NETCore.App NuGet

Jan 8, 2019
High 7.5

CVE-2018-8618 EPSS 11%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Dec 12, 2018