Know every threat before it ships
200K+ vulnerabilities, malicious packages, and supply chain threats enriched with Corgea's research.
HIGH 7.5
CVE-2026-45591
Microsoft Security Advisory CVE-2026-45591 – ASP.NET Core Denial of Service Vulnerability
HIGH 8.2
CVE-2026-48109
MessagePack's LZ4 decompression may fail with AccessViolationException after dereferencing memory from bad input
HIGH 7.5
CVE-2026-46520
ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions
HIGH 7.5
CVE-2026-46522
ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion
HIGH 7.5
CVE-2026-42899
Microsoft Security Advisory CVE-2026-42899 – ASP.NET Core Denial of Service Vulnerability
HIGH 7.5
CVE-2022-24464
.NET Denial of Service Vulnerability
HIGH 7.5
CVE-2022-29145
.NET Denial of Service Vulnerability
HIGH 7.5
CVE-2022-38013
.NET Denial of Service Vulnerability
HIGH 7.5
CVE-2026-32933
AutoMapper Vulnerable to Denial of Service (DoS) via Uncontrolled Recursion
HIGH 8.8
CVE-2015-5237
protobuf susceptible to buffer overflow
HIGH 7.3
CVE-2026-35433
Microsoft Security Advisory CVE-2026-35433 – .NET Elevation of Privilege Vulnerability
HIGH 7.5
CVE-2026-32175
Microsoft Security Advisory CVE-2026-32175 – .NET Core Tampering Vulnerability
HIGH 7.5
CVE-2026-44375
Nerdbank.MessagePack: Attacker-controlled stackalloc in DateTime decoding causes process-terminating StackOverflowException
HIGH 7.5
CVE-2026-44302
Snappier has an infinite loop during SnappyStream decompression with malformed framed input
HIGH 8.8
CVE-2026-43937
YAFNET: Pre-Handler Authorization Bypass on Admin Pages Enables Blind SQL Execution via `/Admin/RunSql`
HIGH 7.3
CVE-2026-43939
YAFNET has Stored XSS in Forum Thread Posts/Replies that Allows Arbitrary JavaScript Execution for All Thread Viewers
HIGH 8.1
CVE-2026-43938
YAFNET has Unauthenticated Stored Second-Order XSS in Admin Event Log via Reflected `User-Agent` Header
HIGH 7.6
CVE-2025-55004
imagemagick: heap-buffer overflow read in MNG magnification with alpha
HIGH 7.5
CVE-2025-66628
ImageMagick is vulnerable to an integer Overflow in TIM decoder leading to out of bounds read (32-bit only)
HIGH 7.5
CVE-2025-53015
ImageMagick has XMP profile write that triggers hang due to unbounded loop
HIGH 7.5
CVE-2026-26171
Microsoft Security Advisory CVE-2026-26171 – .NET Denial of Service Vulnerability
HIGH 7.5
CVE-2026-33116
Microsoft Security Advisory CVE-2026-33116 – .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
HIGH 8.0
CVE-2026-40321
DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG upload
HIGH 7.5
CVE-2026-33901
ImageMagick has a heap Buffer Overflow in ImageMagick MVG decoder
HIGH 7.5
CVE-2026-33908
ImageMagick has a Stack Overflow in DestroyXMLTree()
HIGH 7.5
GHSA-f5v8-v6q3-q4h6
Meridian: Multiple defense-in-depth gaps (collection/depth caps, telemetry, retry, fan-out)
HIGH 7.1
CVE-2026-39959
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
HIGH 8.2
CVE-2026-25794
ImageMagick has heap-buffer-overflow via signed integer overflow in WriteUHDRImage when writing UHDR images with large dimensions
HIGH 7.8
CVE-2026-26131
.NET Elevation of Privilege Vulnerability
HIGH 7.5
CVE-2026-26130
.NET Denial of Service Vulnerability
HIGH 7.5
CVE-2026-26127
.NET Denial of Service Vulnerability
HIGH 7.5
GHSA-32wq-ppwg-3w4m
EnhancedLinq.Async is Vulnerable to Denial of Service via Transitive Dependency Microsoft.Bcl.Memory
HIGH 8.6
GHSA-x6m9-38vm-2xhf
Scriban has an authorization bypass due to stale include cache surviving TemplateContext.Reset()
HIGH 7.5
GHSA-xcx6-vp38-8hr5
Scriban has Uncontrolled Recursion in `object.to_json` Causing Unrecoverable Process Crash via StackOverflowException
HIGH 7.5
GHSA-v66j-x4hw-fv9g
Scriban: Uncontrolled Memory Allocation via string.pad_left/pad_right Allows Remote Denial of Service
HIGH 7.5
GHSA-c875-h985-hvrc
Scriban: Built-in operations bypass LoopLimit and delay cancellation, enabling Denial of Service
HIGH 7.5
GHSA-p6q4-fgr8-vx4p
Scriban has a Stack Overflow via Nested Array Initializers That Bypass the ExpressionDepthLimit Fix
HIGH 7.5
GHSA-wgh7-7m3c-fx25
Scriban has Uncontrolled Recursion in Parser Leads to Stack Overflow and Process Crash (Denial of Service)
HIGH 7.5
GHSA-grr9-747v-xvcp
Scriban has an Infinite Recursion during Object Rendering Leads to Stack Overflow and Process Crash (Denial of Service)
HIGH 7.5
CVE-2026-27449
Umbraco.Engage.Forms Allows Unauthorized Access to Multiple API Endpoints
HIGH 7.5
GHSA-vh8f-65qg-3m8j
Duplicate Advisory: .NET Denial of Service Vulnerability
HIGH 7.5
GHSA-c8gq-rhqh-wgwm
Duplicate Advisory: .NET Denial of Service Vulnerability
HIGH 8.8
CVE-2026-26118
Azure MCP Server has Server-Side Request Forgery issue that allows authorized attacker to elevate privileges over a network
HIGH 7.7
CVE-2026-30929
ImageMagick has stack buffer overflow in MagnifyImage
HIGH 8.1
CVE-2026-28693
ImageMagick: Integer overflow in DIB coder can result in out of bounds read or write
HIGH 7.5
CVE-2026-28691
ImageMagick has uninitialized pointer dereference in JBIG decoder
HIGH 7.4
CVE-2026-25968
ImageMagick: MSL attribute stack buffer overflow leads to out of bounds write.
HIGH 7.1
CVE-2026-28494
ImageMagick vulnerable to stack corruption through long morphology kernel names or arrays
HIGH 7.5
GHSA-8fh9-c4jq-94h4
idunno.Bluesky, idunno.AtProto and idunno.AtProto.OAuthCallback Denial of Service Vulnerability
HIGH 8.6
CVE-2021-41238
Missing Authorization with Default Settings in Dashboard UI
HIGH 8.6
CVE-2021-23428
Path traversal in elFinder.NetCore
HIGH 7.5
CVE-2021-23415
Directory Traversal in elFinder.AspNet
HIGH 8.7
CVE-2021-43853
AjaxNetProfessional deserializes arbitrary JavaScript objects
HIGH 8.2
CVE-2020-5261
Missing Token Replay Detection in Saml2 Authentication services for ASP.NET
HIGH 7.5
CVE-2021-23407
Path Traversal in elFinder.Net.Core
HIGH 7.5
CVE-2022-21167
Code Injection in Masuit.Tools.Core
HIGH 7.5
CVE-2020-7791
Denial of Service in i18n
HIGH 7.8
GHSA-387c-qmrw-59qv
Duplicate Advisory: Microsoft Security Advisory CVE-2026-26131 – .NET Elevation of Privilege Vulnerability
HIGH 7.2
CVE-2026-31834
Umbraco Affected by Vertical Privilege Escalation via Missing Authorization Checks
HIGH 7.5
CVE-2026-24481
ImageMagick has Possible Heap Information Disclosure in PSD ZIP Decompression
Ready to move
Start Securing
Free, no credit card | First findings in minutes