7303 matches found
CVE-2026-85363
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-70194
Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network...
PT-2026-113552
Microsoft has released Patch Tuesday for October 2026 Microsoft has published its October security update package Patch Tuesday, which includes fixes for 1,413 vulnerabilities, three of which are classified as 0-days one of them is actively exploited in attacks. Of the fixed vulnerabilities, 79 a...
UBUNTU-CVE-2026-70194
Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network...
UBUNTU-CVE-2026-70035
Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network...
UBUNTU-CVE-2026-85363
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network...
UBUNTU-CVE-2026-70007
Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network...
CVE-2026-108569
A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack ...
CVE-2026-108570
A security flaw exists in the Furion .NET Framework (up to version 4.9.9.95) within the View Engine component. Specifically, the RunCompile function in the file framework/Furion/ViewEngine/Engines/ViewEngine.cs fails to properly neutralize special elements used in the template engine when process...
CVE-2026-108570 Furion .NET Framework View ViewEngine.cs RunCompile special elements in template engine
A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the file framework/Furion/ViewEngine/Engines/ViewEngine.cs of the component View Engine. The manipulation of the argument content results in improper neutralization of special...
CVE-2026-108569
A SQL injection vulnerability exists in the Furion .NET Framework up to version 4.9.9.92 . The issue is located within the String.Replace function in the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. Specifically, improper handling of the Name argument allows for injection...
EUVD-2026-96875
A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack ...
CVE-2026-108569: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/StringRenderExtensions.cs. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack ...
PT-2026-110102
Name of the Vulnerable Software and Affected Versions Furion .NET Framework versions prior to 4.9.9.96 Description A flaw in the View Engine component allows remote attackers to manipulate the content argument within the RunCompile function of the framework/Furion/ViewEngine/Engines/ViewEngine.cs...
DEBIAN-CVE-2026-105242
Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers ASP.NET request validation, so a request carrying content such as markup made the layout throw and the appender discarded the whole event. A...
CVE-2026-105242
The Apache log4net logging framework (versions 1.2.11 through 3.5.0 ) is vulnerable to an Improper Handling of Exceptional Conditions (CWE-755) in the aspnet-request pattern converter. When reading request parameters, certain content—such as markup—triggers ASP.NET request validation , causing th...
CVE-2026-105242 Apache log4net: Request validation failure drops the event in the aspnet-request converter
Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers ASP.NET request validation, so a request carrying content such as markup made the layout throw and the appender discarded the whole event. A...
CVE-2026-105242 Apache log4net: Request validation failure drops the event in the aspnet-request converter
Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers ASP.NET request validation, so a request carrying content such as markup made the layout throw and the appender discarded the whole event. A...
CVE-2026-105242: Improper Handling of Exceptional Conditions
Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers ASP.NET request validation, so a request carrying content such as markup made the layout throw and the appender discarded the whole event. A...