nuget

842 tracked vulnerabilities.

CVE-2026-40321 HIGH
DNN Platform < 10.2.2 - SVG Upload Stored Cross-Site Scripting
Apr 17, 2026
CVSS 8.0
EPSS 0.00
CVE-2026-40306 MEDIUM
DNN has same HostGUID for all new installs
Apr 17, 2026
EPSS 0.00
CVE-2026-40305 MEDIUM
DNN has Force Friend Request Acceptance
Apr 17, 2026
CVSS 4.3
EPSS 0.00
CVE-2026-39399 CRITICAL
NuGet Gallery: Arbitrary Blob Overwrite via Nuspec Confusion and URI Fragment Truncation
Apr 14, 2026
CVSS 9.6
EPSS 0.00
CVE-2026-33116 HIGH
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
Apr 14, 2026
CVSS 7.5
EPSS 0.02
CVE-2026-32178 HIGH
.NET Spoofing Vulnerability
Apr 14, 2026
CVSS 7.5
EPSS 0.00
CVE-2026-26171 HIGH
Microsoft .NET and PowerShell - Resource Consumption Denial of Service
Apr 14, 2026
CVSS 7.5
EPSS 0.01
CVE-2026-40312 MEDIUM
ImageMagick: Off-by-One in MSL decoder could result in crash
Apr 13, 2026
CVSS 6.2
EPSS 0.00
CVE-2026-40311 MEDIUM
ImageMagick: Heap-use-after-free via XMP profile could result in a crash when printing values
Apr 13, 2026
CVSS 5.5
EPSS 0.00
CVE-2026-40310 MEDIUM
ImageMagick: Heap out-of-bounds write in JP2 encoder
Apr 13, 2026
CVSS 5.5
EPSS 0.00
CVE-2026-40183 MEDIUM
ImageMagick: Heap buffer overflow when encoding JXL image with a 16-bit float
Apr 13, 2026
CVSS 5.5
EPSS 0.00
CVE-2026-40169 MEDIUM
ImageMagick: Heap buffer overflow (WRITE) in the YAML and JSON encoders
Apr 13, 2026
CVSS 6.2
EPSS 0.00
CVE-2026-34238 MEDIUM
ImageMagick: Integer overflow in despeckle operation causes heap buffer overflow on 32-bit builds
Apr 13, 2026
CVSS 5.1
EPSS 0.00
CVE-2026-33908 HIGH
ImageMagick is vulnerable to Stack Overflow in DestroyXMLTree()
Apr 13, 2026
CVSS 7.5
EPSS 0.00
CVE-2026-33905 MEDIUM
ImageMagick has an Out-of-Bounds read via -sample operation
Apr 13, 2026
CVSS 5.5
EPSS 0.00
CVE-2026-33902 MEDIUM
ImageMagick: Stack Overflow via Recursive FX Expression Parsing
Apr 13, 2026
CVSS 5.5
EPSS 0.00
CVE-2026-33901 HIGH
ImageMagick has a Heap Buffer Overflow via MVG decoder
Apr 13, 2026
CVSS 7.5
EPSS 0.00
CVE-2026-33900 MEDIUM
ImageMagick has a Heap overflow caused by integer overflow/wraparound in viff encoder on 32-bit builds
Apr 13, 2026
CVSS 5.9
EPSS 0.00
CVE-2026-33899 MEDIUM
ImageMagick: Heap BufferOverflow write of single zero byte when parsing XML
Apr 13, 2026
CVSS 5.3
EPSS 0.00
CVE-2026-40021 MEDIUM
Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden characters
Apr 10, 2026
CVSS 5.3
EPSS 0.00
CVE-2026-39959 HIGH
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
Apr 09, 2026
CVSS 7.1
EPSS 0.00
CVE-2026-33536 MEDIUM
ImageMagick has an Out-of-bounds Write via InterpretImageFilename
Mar 26, 2026
CVSS 5.1
EPSS 0.00
CVE-2026-33535 MEDIUM
ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction
Mar 26, 2026
CVSS 4.0
EPSS 0.00
CVE-2026-32933 HIGH
AutoMapper Vulnerable to Denial of Service (DoS) via Uncontrolled Recursion
Mar 20, 2026
CVSS 7.5
EPSS 0.00
CVE-2026-32636 MEDIUM
ImageMagick NewXMLTree - Heap Out-of-Bounds Write
Mar 18, 2026
CVSS 5.3
EPSS 0.00
Products
Microsoft.ChakraCore 247 Magick.NET-Q16-AnyCPU 86 Magick.NET-Q16-HDRI-AnyCPU 86 Magick.NET-Q8-AnyCPU 86 Magick.NET-Q16-HDRI-x86 85 Magick.NET-Q16-x86 85 Magick.NET-Q8-x86 84 Magick.NET-Q16-HDRI-OpenMP-arm64 83 Magick.NET-Q16-HDRI-x64 83 Magick.NET-Q16-OpenMP-arm64 83 Magick.NET-Q16-OpenMP-x64 83 Magick.NET-Q16-arm64 83 Magick.NET-Q16-HDRI-arm64 82 Magick.NET-Q8-OpenMP-arm64 82 Magick.NET-Q8-arm64 82 Magick.NET-Q16-x64 79 Magick.NET-Q8-OpenMP-x64 79 Magick.NET-Q8-x64 76 Magick.NET-Q16-HDRI-OpenMP-x64 69 Magick.NET-Q16-OpenMP-x86 57 DotNetNuke.Core 35 Microsoft.AspNetCore.App.Runtime.win-x64 25 Microsoft.AspNetCore.App.Runtime.win-x86 25 Microsoft.AspNetCore.App.Runtime.win-arm 24 Microsoft.AspNetCore.App.Runtime.linux-arm 22 Microsoft.AspNetCore.App.Runtime.linux-arm64 22 Microsoft.AspNetCore.App.Runtime.linux-musl-x64 22 Microsoft.AspNetCore.App.Runtime.linux-x64 22 Microsoft.AspNetCore.App.Runtime.osx-x64 22 Microsoft.AspNetCore.App.Runtime.win-arm64 22
Quick Filters
Critical CVEs With Exploits In CISA KEV