43209 matches found
.NET Security Feature Bypass Vulnerability
Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network...
ASP.NET Core Elevation of Privilege Vulnerability
Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
July 14, 2026-KB5101001 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 24H2
None None...
.NET Security Feature Bypass Vulnerability
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...
July 14, 2026-KB5101008 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 1809 and Windows Server 2019
None None...
July 14, 2026-KB5101002 Cumulative Update for .NET Framework 4.8.1 for Windows 11, version 26H1
None None...
July 14, 2026-Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 (KB5100984)
None None...
July 14, 2026-Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 R2 (KB5100985)
None None...
July 14, 2026-Security and Quality Rollup for .NET Framework 4.8 for Windows Server 2012 (KB5101009)
None None...
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...
Important: Red Hat Security Advisory: git-lfs security update
An update for git-lfs is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
Security update for the Linux Kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.163 fixes various security issues The following security issues were fixed: CVE-2026-23393: bridge: cfm: Fix race condition in peermep deletion bsc1260524. CVE-2026-31505: iavf: fix out-of-bounds writes in iavfgetethtoolstats...
kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change
In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active list before deleting in etsqdiscchange [email protected] says: The vulnerability is a race condition between etsqdiscdequeue and etsqdiscchange. It leads to UAF on stru...
Security Update for Microsoft .NET Core SDK (July 2026)
The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by a vulnerability as referenced in the vendor advisory. - Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering...
PT-2026-59003
Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode Summary When netlicensing-mcp is run in HTTP transport mode, the ApiKeyMiddleware fails to enforce authentication: requests that carry no client API key are unconditionally forwarded to the next handler server.py:1427. The...
CVE-2026-50651: Allocation of Resources Without Limits or Throttling
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
PT-2026-58713
Name of the Vulnerable Software and Affected Versions .NET Framework affected versions not specified Description Improper validation of a specified input type allows an unauthorized attacker to cause a denial of service over a network. Recommendations At the moment, there is no information about ...
CVE-2026-50650: Improper Control of Generation of Code
Improper control of generation of code 'code injection' in .NET Framework allows an unauthorized attacker to elevate privileges locally...
CVE-2026-57108: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in .NET Core allows an unauthorized attacker to deny service over a network...