An open API service providing security vulnerability metadata for many open source software ecosystems.

Browse Security Advisories

High
almost 7 years ago

ASP.NET Core fails to properly validate web requests MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZ4aDctNHYydy0zNnE2

nuget System.Net.Http.WinHttpHandler, Microsoft.AspNetCore.Mvc.WebApiCompatShim, Microsoft.AspNetCore.Mvc.ViewFeatures, Microsoft.AspNetCore.Mvc.TagHelpers, Microsoft.AspNetCore.Mvc.Razor, Microsoft.AspNetCore.Mvc.Razor.Host, Microsoft.AspNetCore.Mvc.Localization, Microsoft.AspNetCore.Mvc.Formatters.Xml, Microsoft.AspNetCore.Mvc.Formatters.Json, Microsoft.AspNetCore.Mvc.DataAnnotations, Microsoft.AspNetCore.Mvc.Cors, Microsoft.AspNetCore.Mvc.ApiExplorer, Microsoft.AspNetCore.Mvc.Abstractions, System.Net.WebSockets.Client, System.Net.Security, System.Text.Encodings.Web, System.Net.Http, Microsoft.AspNetCore.Mvc.Core, Microsoft.AspNetCore.Mvc
High
almost 7 years ago

High severity vulnerability that affects Microsoft.AspNetCore.Mvc MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFocWYtZ2hnaC14Mm00

nuget DisCatSharp, Microsoft.AspNetCore.Mvc.WebApiCompatShim, Microsoft.AspNetCore.Mvc.ViewFeatures, Microsoft.AspNetCore.Mvc.TagHelpers, Microsoft.AspNetCore.Mvc.Razor, Microsoft.AspNetCore.Mvc.Razor.Host, Microsoft.AspNetCore.Mvc.Localization, Microsoft.AspNetCore.Mvc.Formatters.Xml, Microsoft.AspNetCore.Mvc.Formatters.Json, Microsoft.AspNetCore.Mvc.DataAnnotations, Microsoft.AspNetCore.Mvc.Cors, Microsoft.AspNetCore.Mvc.ApiExplorer, Microsoft.AspNetCore.Mvc.Abstractions, System.Net.WebSockets.Client, System.Net.Security, System.Net.Http.WinHttpHandler, System.Text.Encodings.Web, System.Net.Http, Microsoft.AspNetCore.Mvc.Core, Microsoft.AspNetCore.Mvc

Filter by Severity

Filter by Ecosystem

Filter by Package

Microsoft.ChakraCore 234 tensorflow 122 tensorflow-gpu 119 tensorflow-cpu 115 magento/community-edition 80 moodle/moodle 61 org.jenkins-ci.main:jenkins-core 56 Django 49 com.fasterxml.jackson.core:jackson-databind 43 typo3/cms 42 dolibarr/dolibarr 34 drupal/core 33 Plone 33 org.apache.tomcat:tomcat 33 librenms/librenms 32 pimcore/pimcore 30 mlflow 30 apache-airflow 29 drupal/drupal 29 typo3/cms-core 29 salt 29 github.com/rancher/rancher 28 phpmyadmin/phpmyadmin 28 microweber/microweber 27 nokogiri 26 magento/project-community-edition 24 ansible 24 org.apache.struts:struts2-core 24 opencv-python 23 opencv-contrib-python 23 com.thoughtworks.xstream:xstream 22 symfony/symfony 22 com.jfinal:jfinal 21 Pillow 21 com.liferay.portal:release.portal.bom 21 org.jenkins-ci.plugins:script-security 20 django 20 org.apache.tomcat.embed:tomcat-embed-core 20 thorsten/phpmyfaq 20 matrix-synapse 20 com.liferay.portal:release.dxp.bom 17 Microsoft.AspNetCore.App.Runtime.win-x86 17 Microsoft.AspNetCore.App.Runtime.win-x64 17 pocketmine/pocketmine-mp 17 github.com/grafana/grafana 17 gradio 17 openssl-src 17 rdiffweb 17 getgrav/grav 16 io.undertow:undertow-core 16 Microsoft.AspNetCore.App.Runtime.win-arm 16 pillow 16 github.com/hashicorp/vault 16 parse-server 16 github.com/hashicorp/consul 15 open-webui 15 nilsteampassnet/teampass 15 Microsoft.AspNetCore.App.Runtime.win-arm64 15 keystone 15 org.keycloak:keycloak-core 14 shopware/platform 14 github.com/usememos/memos 14 centreon/centreon 14 net.mingsoft:ms-mcms 14 Microsoft.NetCore.App.Runtime.win-x86 14 Microsoft.NetCore.App.Runtime.win-x64 14 craftcms/cms 14 vyper 14 Microsoft.AspNetCore.App.Runtime.linux-arm 14 Microsoft.AspNetCore.App.Runtime.linux-arm64 14 Microsoft.NetCore.App.Runtime.win-arm64 14 Microsoft.NetCore.App.Runtime.win-arm 14 Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 14 Microsoft.AspNetCore.App.Runtime.linux-musl-x64 14 Microsoft.AspNetCore.App.Runtime.linux-x64 14 Microsoft.AspNetCore.App.Runtime.osx-x64 14 mautic/core 13 org.keycloak:keycloak-services 13 golang.org/x/net 13 apache-superset 13 mindsdb 13 electron 13 silverstripe/framework 13 org.xwiki.platform:xwiki-platform-oldcore 13 org.apache.solr:solr-core 13 rubygems-update 13 phpoffice/phpexcel 12 org.apache.openmeetings:openmeetings-parent 12 shopware/core 12 activerecord 12 baserproject/basercms 12 froxlor/froxlor 11 directus 11 gogs.io/gogs 11 phpoffice/phpspreadsheet 11 github.com/nats-io/nats-server/v2 11 github.com/hashicorp/nomad 11 next 11 github.com/zitadel/zitadel 11 intelliants/subrion 11 org.keycloak:keycloak-parent 11 cockpit-hq/cockpit 11 actionpack 11 Microsoft.AspNetCore.App.Runtime.linux-musl-arm 10 github.com/ollama/ollama 10 org.springframework.security:spring-security-core 10 nova 10 surrealdb 10 github.com/argoproj/argo-cd 10 k8s.io/kubernetes 10 deno 10 snipe/snipe-it 10 openmage/magento-lts 10 funadmin/funadmin 10 laravel/framework 10 org.apache.geode:geode-core 9 Microsoft.NetCore.App.Runtime.linux-musl-arm 9 Microsoft.NetCore.App.Runtime.linux-musl-x64 9 Microsoft.NetCore.App.Runtime.linux-arm64 9 Microsoft.NetCore.App.Runtime.linux-arm 9 Microsoft.NetCore.App.Runtime.linux-x64 9 Microsoft.NetCore.App.Runtime.osx-arm64 9 rusqlite 9 zendframework/zendframework1 9 ckb 9 Microsoft.NetCore.App.Runtime.osx-x64 9 org.cloudfoundry.identity:cloudfoundry-identity-server 9 aim 9 org.apache.nifi:nifi 9 cobbler 9 org.apache.struts.xwork:xwork-core 9 h2o 9 litellm 9 lollms 9 neutron 9 org.bouncycastle:bcprov-jdk14 9 Microsoft.NetCore.App.Runtime.linux-musl-arm64 9 github.com/traefik/traefik/v2 9 org.apache.hadoop:hadoop-main 9 mercurial 9 github.com/ethereum/go-ethereum 9 github.com/sylabs/singularity 8 composer/composer 8 october/system 8 phpbb/phpbb 8 smarty/smarty 8 yeswiki/yeswiki 8 org.jenkins-ci.plugins.workflow:workflow-cps 8 cryptography 8 moin 8 plone 8 org.apache.tomcat:tomcat-catalina 8 org.bouncycastle:bcprov-jdk15 8 org.craftercms:crafter-studio 8 github.com/docker/docker 8 Microsoft.AspNetCore.App.Runtime.osx-arm64 8 org.eclipse.jetty:jetty-server 8 ai.h2o:h2o-core 8 Microsoft.NETCore.App.Runtime.win-arm64 8 Microsoft.NETCore.App.Runtime.win-x64 8 Microsoft.NETCore.App.Runtime.win-x86 8 rack 8 github.com/argoproj/argo-cd/v2 8 golang.org/x/crypto 7 strapi 7 symfony/security 7 contao/core-bundle 7 symfony/security-http 7 ryu 7 org.springframework:spring-core 7 org.apache.tomcat:tomcat-coyote 7 flowise 7 cakephp/cakephp 7 zendframework/zendframework 7 cn.hutool:hutool-core 7 github.com/filebrowser/filebrowser/v2 7 com.xuxueli:xxl-job 7 org.jenkins-ci.plugins.workflow:workflow-cps-global-lib 7 tar 7 mantisbt/mantisbt 7 opencv-contrib-python-headless 7 apollo-router 7 opencv-python-headless 7 phpmailer/phpmailer 7 codeigniter4/framework 7 org.apache.inlong:manager-pojo 7 org.elasticsearch:elasticsearch 7 DotNetNuke.Core 7 @strapi/strapi 7 OPCFoundation.NetStandard.Opc.Ua.Core 7 k8s.io/ingress-nginx 7 magento/core 7 istio.io/istio 6 prestashop/prestashop 6 trytond 6 guzzlehttp/guzzle 6 handlebars 6 opencart/opencart 6 express-cart 6 sentry 6

Filter by Repository