74 matches found
Moderate: .NET 6.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.122 and .NET Runtime 6.0.22...
ALSA-2023:5145 Moderate: .NET 7.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.111 and .NET Runtime 7.0.11...
RHEL 8 : .NET 7.0 (RHSA-2023:5145)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:5145 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. N...
CVE-2023-36799
.NET Core and Visual Studio Denial of Service Vulnerability...
CVE-2023-36799 .NET Core and Visual Studio Denial of Service Vulnerability
...
CVE-2023-36799 .NET Core and Visual Studio Denial of Service Vulnerability
...
CVE-2023-36799
CVE-2023-36799 is a Denial of Service vulnerability in .NET Core/Visual Studio using .NET Kestrel that could be triggered remotely via crafted content, with an in-wild impact described as availability loss (I: High) and no confidentiality or integrity impact per the CVSS vector. Public advisories...
CVE-2023-36799
.NET Core and Visual Studio Denial of Service Vulnerability...
Ubuntu 22.04 LTS / 23.04 : .NET vulnerability (USN-6362-1)
The remote Ubuntu 22.04 LTS / 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6362-1 advisory. Kevin Jones discovered that .NET did not properly process certain X.509 certificates. An attacker could possibly use this issue to cause a denial of...
CVE-2022-36799
Atlassian Jira Server/Data Center is affected by CVE-2022-36799 via Template Injection in Email Templates, enabling Remote Code Execution when an attacker with system administrator permissions exploits velocity templates. Affected versions are:
CVE-2021-36799
creationtimestamp| type| source ---|---|--- 2021-11-08 21:56:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/830 2021-11-10 02:35:27+00:00| seen| https://t.me/cibsecurity/32128 2021-11-10 09:32:12+00:00| published-proof-of-concept| https://t.me/hackertrick/407...
CVE-2021-36799
CVE-2021-36799 : KNX ETS5 through 5.7.6 uses a hard-coded password (ETS5Password) with a salt value (Ivan Medvedev), enabling local users to read project information. This vulnerability is limited to products no longer supported by the maintainer. No public remediation or patch details are provid...