Skip to content
Fencer Intel

All · nuget

Newest first, late arrivals on top. Also a feed.

  1. 5.4
    CVE-2025-52485 DNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity Feed
    nuget
  2. 6.1
    CVE-2025-52486 DNN.PLATFORM Allows Reflected Cross-Site Scripting (XSS) in some TokenReplace situations with SkinObjects
    nuget
  3. 7.5
    GHSA-6q65-j4jw-9cg8 DotVVM allows path traversal when deployed in Debug mode
    nuget
  4. 4.9
    CVE-2025-49015 Couchbase .NET SDK (client library) does not properly enable hostname verification for TLS certificates
    nuget
  5. 7.5
    CVE-2025-30399 .NET and Visual Studio Remote Code Execution Vulnerability
    nugetbitnami
    EPSS 1.1% chance of exploitation in 30 days, percentile 66%
  6. 5.5
    CVE-2025-48953 Umbraco Vulnerable to By-Pass of Configured Allowed Extensions for File Uploads
    nuget
  7. 5.4
    CVE-2025-48377 Dnn.Platform vulnerable to Reflected Cross-Site Scripting (XSS) in module actions in edit mode
    nuget
  8. 5.4
    CVE-2025-48378 Dnn.Platform vulnerable to Stored Cross-Site Scripting (XSS) with svg files rendered inline
    nuget
  9. 3.5
    CVE-2025-48376 Dnn.Platform's Site Import could use an external source with a crafted request
    nuget
  10. 8.0
    CVE-2025-26646 .NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability
    nugetbitnami
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%
  11. 6.1
    CVE-2025-47280 Umbraco.Forms has HTML injection vulnerability in 'Send email' workflow
    nuget
  12. 5.3
    CVE-2025-46736 Umbraco Makes User Enumeration Feasible Based on Timing of Login Response
    nuget
  13. 3.3
    CVE-2025-46326 Snowflake Connector for .NET has race condition when checking access to Easy Logging configuration file
    nuget
  14. 9.2
    CVE-2025-43858 YoutubeDLSharp allows command injection on windows system due to non sanitized arguments
    nuget
  15. 7.5
    CVE-2025-3857 Infinite loop condition in Amazon.IonDotnet
    nuget
  16. 9.8
    CVE-2025-29953 Apache ActiveMQ NMS OpenWire Client: deserialization allowlist bypass
    nuget
    EPSS 2.1% chance of exploitation in 30 days, percentile 81%
  17. 8.3
    GHSA-f87w-3j5w-v58p CefSharp affected by incorrect handle provided in unspecified circumstances in Mojo on Windows
    nuget
  18. 4.7
    CVE-2025-32016 Microsoft Identity Web Exposes Client Secrets and Certificate Information in Service Logs
    nuget
  19. 6.5
    CVE-2025-32372 Server-Side Request Forgery (SSRF) in DotNetNuke.Core
    nuget
  20. 8.8
    CVE-2025-32017 Umbraco has a Management API Vulnerability to Path Traversal With Authenticated Users
    nuget
  21. 7.0
    CVE-2025-24070 ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
    nugetbitnami
    EPSS 1.0% chance of exploitation in 30 days, percentile 63%
  22. 4.9
    CVE-2025-27602 Umbraco Allows a Restricted Editor User to Delete Media Item or Access Unauthorized Content
    nuget
  23. 4.3
    CVE-2025-27601 Umbraco Allows Improper API Access Control to Low-Privilege Users to Data Type Functionality
    nuget
  24. 7.5
    CVE-2025-24043 WinDbg Remote Code Execution Vulnerability
    nuget
  25. 7.5
    GHSA-vc29-vg52-6643 DoS Vulnerability in TraceContextPropagator.Extract - OpenTelemetry.Api
    nuget
  26. 7.5
    CVE-2025-27598 Out-of-bounds Write in SixLabors ImageSharp
    nuget
  27. 7.5
    CVE-2025-27513 OpenTelemetry .NET has a Denial of Service (DoS) Vulnerability in API Package
    nuget
  28. 7.5
    CVE-2024-57716 AutoQueryable leaks sensitive information
    nuget
  29. 9.1
    CVE-2025-24895 SAML Response Signature Verification Bypass in CIE.AspNetCore.Authentication
    nuget
  30. 9.1
    CVE-2025-24894 SAML Response Signature Verification Bypass in SPID.AspNetCore.Authentication
    nuget