nuget

901 tracked vulnerabilities.

CVE-2016-3259 HIGH
Microsoft Edge and Internet Explorer - Remote Code Execution via Scripting Engine Memory Corruption
Jul 13, 2016
CVSS 8.8
EPSS 0.36
CVE-2016-3248 HIGH
Microsoft Edge - Remote Code Execution via Scripting Engine Memory Corruption
Jul 13, 2016
CVSS 8.8
EPSS 0.23
CVE-2016-3214 HIGH
Microsoft Edge - Remote Code Execution via Chakra JavaScript Engine Memory Corruption
Jun 16, 2016
CVSS 8.8
EPSS 0.16
CVE-2016-3202 HIGH
Microsoft Chakra JavaScript, JScript, and VBScript - Remote Code Execution via Memory Corruption
Jun 16, 2016
CVSS 7.5
EPSS 0.17
CVE-2016-3199 HIGH
Microsoft Edge - Remote Code Execution via Chakra JavaScript Engine Memory Corruption
Jun 16, 2016
CVSS 8.8
EPSS 0.27
CVE-2016-0193 HIGH
Microsoft Edge - Remote Code Execution via Chakra JavaScript Engine Memory Corruption
May 11, 2016
CVSS 7.5
EPSS 0.20
CVE-2016-0191 HIGH
Microsoft Edge - Remote Code Execution via Chakra JavaScript Engine Memory Corruption
May 11, 2016
CVSS 7.5
EPSS 0.28
CVE-2016-0186 HIGH
Microsoft Edge - Remote Code Execution via Chakra JavaScript Engine Memory Corruption
May 11, 2016
CVSS 7.5
EPSS 0.19
CVE-2016-0024 HIGH
Microsoft Edge - Remote Code Execution via Chakra JavaScript Engine Memory Corruption
Jan 13, 2016
CVSS 8.8
EPSS 0.18
CVE-2015-9251 MEDIUM
jQuery < 3.0.0 - Cross-Site Scripting via Cross-Domain Ajax Request
Jan 18, 2018
CVSS 6.1
EPSS 0.30
CVE-2015-8814 HIGH
Umbraco < 7.4.0 - Cross-Site Request Forgery via templates.asmx.cs
Mar 03, 2017
CVSS 8.8
EPSS 0.01
CVE-2015-8813 HIGH NUCLEI
Umbraco < 7.4.0 - Server-Side Request Forgery via FeedProxy URL Parameter
Mar 03, 2017
CVSS 8.2
EPSS 0.12
CVE-2015-2794 CRITICAL NUCLEI
DotNetNuke < 7.4.1 - Unauthenticated Application Reinstallation and Privilege Escalation via Install Wizard
Feb 06, 2017
CVSS 9.8
EPSS 0.75
CVE-2015-1566
DotNetNuke < 7.4.0 - Cross-Site Scripting
Feb 09, 2015
EPSS 0.02
CVE-2014-4172 CRITICAL
Jasig Java CAS Client <3.3.2, .NET CAS Client <1.0.2, phpCAS <1.3.3 - URL Parameter Injection
Jan 24, 2020
CVSS 9.8
EPSS 0.06
CVE-2013-7335
DotNetNuke <6.2.9, <7.1.1 - Open Redirect
Mar 12, 2014
EPSS 0.01
CVE-2013-4649
DotNetNuke < 6.2.9 and 7.x < 7.1.1 - Cross-Site Scripting via __dnnVariable Parameter
Mar 12, 2014
EPSS 0.02
CVE-2012-6708 MEDIUM
jQuery < 1.9.0 - Cross-Site Scripting via jQuery(strInput) Function
Jan 18, 2018
CVSS 6.1
EPSS 0.09
CVE-2012-6662
Redhat Enterprise Linux Desktop < 1.10.0 - XSS
Nov 24, 2014
EPSS 0.06
CVE-2011-4969
jQuery < 1.6.3 - Cross-Site Scripting via location.hash Element Selection
Mar 08, 2013
EPSS 0.19
CVE-2010-5312 MEDIUM
jQuery UI <1.10.0 - XSS
Nov 24, 2014
CVSS 6.1
EPSS 0.18
CVE-2010-1459
Mono < 2.6.4 - Cross-Site Scripting via __VIEWSTATE Parameter
May 27, 2010
EPSS 0.02
CVE-2009-4665
CuteSoft Components Cute Editor - Path Traversal
Mar 05, 2010
EPSS 0.07
CVE-2008-6540
DotNetNuke < 4.8.2 - Unauthenticated Access Restriction Bypass via Default Validation and Decryption Keys
Mar 30, 2009
EPSS 0.02
CVE-2007-0660
DotNetNuke IFrame < 03.02.01 - Cross-Site Scripting via Pass-Through Values
Feb 01, 2007
EPSS 0.01
Products
Microsoft.ChakraCore 247 Magick.NET-Q16-AnyCPU 114 Magick.NET-Q16-HDRI-AnyCPU 114 Magick.NET-Q8-AnyCPU 114 Magick.NET-Q16-HDRI-x86 113 Magick.NET-Q16-x86 113 Magick.NET-Q8-x86 112 Magick.NET-Q16-HDRI-OpenMP-arm64 111 Magick.NET-Q16-HDRI-x64 111 Magick.NET-Q16-OpenMP-arm64 111 Magick.NET-Q16-OpenMP-x64 111 Magick.NET-Q16-arm64 111 Magick.NET-Q16-HDRI-arm64 110 Magick.NET-Q8-OpenMP-arm64 110 Magick.NET-Q8-arm64 110 Magick.NET-Q16-x64 107 Magick.NET-Q8-OpenMP-x64 107 Magick.NET-Q8-x64 104 Magick.NET-Q16-HDRI-OpenMP-x64 83 Magick.NET-Q16-OpenMP-x86 58 DotNetNuke.Core 35 Microsoft.AspNetCore.App.Runtime.win-x64 26 Microsoft.AspNetCore.App.Runtime.win-x86 25 Microsoft.AspNetCore.App.Runtime.win-arm 24 Microsoft.AspNetCore.App.Runtime.linux-x64 23 Microsoft.AspNetCore.App.Runtime.linux-arm 22 Microsoft.AspNetCore.App.Runtime.linux-arm64 22 Microsoft.AspNetCore.App.Runtime.linux-musl-x64 22 Microsoft.AspNetCore.App.Runtime.osx-x64 22 Microsoft.AspNetCore.App.Runtime.win-arm64 22
Quick Filters
Critical CVEs With Exploits In CISA KEV