Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2016-3389The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupNuGet · microsoft.chakracore · fixed in 1.2.1
- CVE-2016-3390The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a deniaNuGet · microsoft.chakracore · fixed in 1.2.1
- CVE-2016-7189The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting EngiNuGet · microsoft.chakracore · fixed in 1.2.1
- CVE-2016-7190The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupNuGet · microsoft.chakracore
- CVE-2016-7194The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupNuGet · microsoft.chakracore
- CVE-2016-3350The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupNuGet · microsoft.chakracore · fixed in 1.2.1
- CVE-2016-3377The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupNuGet · microsoft.chakracore · fixed in 1.2.1
- CVE-2016-7119Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN) before 8.0.1 allows remote authenticated NuGet · dotnetnuke.core · fixed in 8.0.1
- CVE-2016-3296The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting EngiNuGet · microsoft.chakracore
- CVE-2016-3248The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, MicrosoftNuGet · microsoft.chakracore
- CVE-2016-3259The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, MicrosoftNuGet · microsoft.chakracore · fixed in 1.2.0.0
- CVE-2016-3260The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 11, Microsoft Edge, andNuGet · microsoft.chakracore · fixed in 1.2.0.0
- CVE-2016-3265The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupNuGet · microsoft.chakracore · fixed in 1.2.0.0
- CVE-2016-3269The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupNuGet · microsoft.chakracore · fixed in 1.2.0.0
- CVE-2016-3199The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupNuGet · microsoft.chakracore · fixed in 1.2.0.0
- CVE-2016-3202The Microsoft (1) Chakra JavaScript, (2) JScript, and (3) VBScript engines, as used in Microsoft Internet Explorer 10 and 11 and Microsoft ENuGet · microsoft.chakracore · fixed in 1.2.0.0
- CVE-2016-3214The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupNuGet · microsoft.chakracore · fixed in 1.3.0
- CVE-2016-0186The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupNuGet · microsoft.chakracore · fixed in 1.2.0.0
- CVE-2016-0191The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupNuGet · microsoft.chakracore · fixed in 1.2.0.0
- CVE-2016-0193The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupNuGet · microsoft.chakracore · fixed in 1.2.0.0
- CVE-2016-0024The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Scripting EngNuGet · microsoft.chakracore · fixed in 1.2.0
- CVE-2015-1566Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary web script or HTML viaNuGet · dotnetnuke.core · fixed in 7.4.0
- CVE-2012-6662Cross-site scripting (XSS) vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.1NuGet · jquery.ui.combined · fixed in 1.10.0
- CVE-2010-5312Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to iNuGet · jquery.ui.combined · fixed in 1.10.0
- CVE-2013-4649Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to inject arbitrary wNuGet · dotnetnuke.core · fixed in 6.2.9, 7.1.1
- CVE-2013-7335Open redirect vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to redirect users to arbitrary webNuGet · dotnetnuke.core · fixed in 6.2.9, 7.1.1
- CVE-2011-4969Cross-site scripting (XSS) vulnerability in jQuery before 1.6.3, when using location.hash to select elements, allows remote attackers to injNuGet · jquery · fixed in 1.6.3
- CVE-2010-1459The default configuration of ASP.NET in Mono before 2.6.4 has a value of FALSE for the EnableViewStateMac property, which allows remote attaNuGet · mono · fixed in 2.6.4
- CVE-2009-4665Directory traversal vulnerability in CuteSoft_Client/CuteEditor/Load.ashx in CuteSoft Components Cute Editor for ASP.NET allows remote attacNuGet · cuteeditor · fixed in 6.6
- CVE-2008-6540DotNetNuke before 4.8.2, during installation or upgrade, does not warn the administrator when the default (1) ValidationKey and (2) DecryptiNuGet · dotnetnuke.core · fixed in 4.8.2