nuget

901 tracked vulnerabilities.

CVE-2023-26154 MEDIUM
PubNub <7.4.0, <6.19.0, <7.3.0, <6.1.0, <5.3.0, <0.4.0 - Path Trave...
Dec 06, 2023
CVSS 5.9
EPSS 0.01
CVE-2023-49289 MEDIUM
Ajax.NET Professional < 21.12.22.1 - Cross-Site Scripting
Dec 05, 2023
CVSS 6.3
EPSS 0.01
CVE-2023-48219 MEDIUM
TinyMCE < 5.10.9 - Mutation Cross-Site Scripting via Undo/Redo Functionality
Nov 15, 2023
CVSS 6.1
EPSS 0.01
CVE-2023-36558 MEDIUM
.NET 6.0.0-6.0.24 and ASP.NET Core 6.0.0-6.0.24 - Security Feature Bypass
Nov 14, 2023
CVSS 6.2
EPSS 0.01
CVE-2023-36049 HIGH
Microsoft .NET and .NET Framework - Elevation of Privilege
Nov 14, 2023
CVSS 7.6
EPSS 0.13
CVE-2023-45819 MEDIUM
TinyMCE < 5.10.8 and 6.0.0-6.7.1 - Cross-Site Scripting via Notification Manager API
Oct 19, 2023
CVSS 6.1
EPSS 0.01
CVE-2023-45818 MEDIUM
TinyMCE < 5.10.8 and 6.0.0-6.7.1 - Stored Cross-Site Scripting via Undo/Redo HTML Mutation
Oct 19, 2023
CVSS 6.1
EPSS 0.01
CVE-2023-45814 MEDIUM
Bunkum 4.0-4.2.0 - Use-After-Free in AuthenticationService Token Caching
Oct 18, 2023
CVSS 5.3
EPSS 0.00
CVE-2023-38171 HIGH
.NET >=7.0.0 <7.0.12 - Denial of Service via QUIC NULL Pointer Dereference
Oct 10, 2023
CVSS 7.5
EPSS 0.69
CVE-2023-36566 MEDIUM
Microsoft Common Data Model SDK - DoS
Oct 10, 2023
CVSS 6.5
EPSS 0.03
CVE-2023-36435 HIGH
.NET >=7.0.0 <7.0.12 - Denial of Service via QUIC Resource Consumption
Oct 10, 2023
CVSS 7.5
EPSS 0.05
CVE-2023-36414 HIGH
Azure Identity SDK < 1.10.2 - Remote Code Execution
Oct 10, 2023
CVSS 8.8
EPSS 0.02
CVE-2023-44390 MEDIUM
HtmlSanitizer < 8.0.723 - Cross-Site Scripting via SVG/Math Foreign Content Bypass
Oct 05, 2023
CVSS 6.1
EPSS 0.00
CVE-2023-41890 HIGH
Sustainsys.Saml2 <1.0.3, <2.9.2 - Info Disclosure
Sep 19, 2023
CVSS 7.5
EPSS 0.01
CVE-2023-36799 MEDIUM
.NET and Visual Studio - Denial of Service
Sep 12, 2023
CVSS 6.5
EPSS 0.05
CVE-2023-36796 HIGH
Microsoft Visual Studio - Remote Code Execution
Sep 12, 2023
CVSS 7.8
EPSS 0.01
CVE-2023-36794 HIGH
Microsoft Visual Studio - Remote Code Execution
Sep 12, 2023
CVSS 7.8
EPSS 0.01
CVE-2023-36793 HIGH
Microsoft Visual Studio - Remote Code Execution
Sep 12, 2023
CVSS 7.8
EPSS 0.01
CVE-2023-36792 HIGH
Microsoft Visual Studio - Remote Code Execution
Sep 12, 2023
CVSS 7.8
EPSS 0.01
CVE-2023-4863 HIGH KEV
Google Chrome <116.0.5845.187 - Buffer Overflow
Sep 12, 2023
CVSS 8.8
EPSS 1.00
CVE-2023-38180 HIGH KEV
.NET 6.0.0-6.0.20 and ASP.NET Core 2.1-2.1.39 - Denial of Service
Aug 08, 2023
CVSS 7.5
EPSS 0.16
CVE-2023-35391 MEDIUM
.NET 6.0.0-6.0.20, ASP.NET Core 2.1-2.1.39, Visual Studio 2022 17.2.0-17.2.17 - Information Disclosure
Aug 08, 2023
CVSS 6.2
EPSS 0.02
CVE-2023-38178 HIGH
.NET 7.0.0-7.0.9 and Visual Studio 2022 17.2.0-17.2.17 - Denial of Service
Aug 08, 2023
CVSS 7.5
EPSS 0.03
CVE-2023-35390 HIGH
.NET 6.0.0-6.0.20 and Visual Studio 2022 17.2.0-17.2.17 - Remote Code Execution
Aug 08, 2023
CVSS 7.8
EPSS 0.02
CVE-2023-37267 HIGH
Umbraco CMS 10.0.0-10.6.0 - Unauthenticated Privilege Escalation to Admin
Jul 13, 2023
CVSS 7.5
EPSS 0.01
Products
Microsoft.ChakraCore 247 Magick.NET-Q16-AnyCPU 114 Magick.NET-Q16-HDRI-AnyCPU 114 Magick.NET-Q8-AnyCPU 114 Magick.NET-Q16-HDRI-x86 113 Magick.NET-Q16-x86 113 Magick.NET-Q8-x86 112 Magick.NET-Q16-HDRI-OpenMP-arm64 111 Magick.NET-Q16-HDRI-x64 111 Magick.NET-Q16-OpenMP-arm64 111 Magick.NET-Q16-OpenMP-x64 111 Magick.NET-Q16-arm64 111 Magick.NET-Q16-HDRI-arm64 110 Magick.NET-Q8-OpenMP-arm64 110 Magick.NET-Q8-arm64 110 Magick.NET-Q16-x64 107 Magick.NET-Q8-OpenMP-x64 107 Magick.NET-Q8-x64 104 Magick.NET-Q16-HDRI-OpenMP-x64 83 Magick.NET-Q16-OpenMP-x86 58 DotNetNuke.Core 35 Microsoft.AspNetCore.App.Runtime.win-x64 26 Microsoft.AspNetCore.App.Runtime.win-x86 25 Microsoft.AspNetCore.App.Runtime.win-arm 24 Microsoft.AspNetCore.App.Runtime.linux-x64 23 Microsoft.AspNetCore.App.Runtime.linux-arm 22 Microsoft.AspNetCore.App.Runtime.linux-arm64 22 Microsoft.AspNetCore.App.Runtime.linux-musl-x64 22 Microsoft.AspNetCore.App.Runtime.osx-x64 22 Microsoft.AspNetCore.App.Runtime.win-arm64 22
Quick Filters
Critical CVEs With Exploits In CISA KEV