PT-2022-23204 · Blue Prism · Blue Prism Enterprise

Name of the Vulnerable Software and Affected Versions: Blue Prism Enterprise versions 6.0 through 7.01 Description: An issue allows an authenticated user to reverse engineer the software and circumvent access controls for the setValidationInfo administrative function in a misconfigured environmen...

AZL-35342 CVE-2021-4217 affecting package unzip for versions less than 6.0-22

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution...

AlmaLinux 8 : .NET 6.0 (6058) (ALSA-2022:6058)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:6058 advisory. - .NET Spoofing Vulnerability. CVE-2022-34716 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

Information disclosure

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow an authenticated user to obtain sensitive information due to improper permission controls. IBM X-Force ID: 216109...

.NET 6.0 security, bug fix, and enhancement update

An update is available for dotnet6.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a managed-software framework. It implements a subset of the .NET...

.NET 6.0 security, bug fix, and enhancement update

6.0.108-1.0.1 - Add missing Oracle RIDs 6.0.108-1 - Update to .NET SDK 6.0.108 and Runtime 6.0.8 - Resolves: RHBZ2112412...

RHEL 8 : .NET 6.0 (RHSA-2022:6058)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:6058 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. N...

GHSA-2M65-M22P-9WJW Duplicate Advisory: .NET Information Disclosure Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-vh55-786g-wjwj. This link is maintained to preserve external references. Original Description Microsoft is releasing this security advisory to provide information about a vulnerability in .NET Core 3.1 and .NET...

.NET 6.0 security, bug fix, and enhancement update

6.0.108-1.0.1 - Add missing Oracle RIDs - Build all packages on source-build even when in servicing 6.0.108-1 - Update to .NET SDK 6.0.108 and Runtime 6.0.8 - Resolves: RHBZ2112413...

Moderate: .NET 6.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.108 and .NET Runtime 6.0.8...

RHEL 9 : .NET 6.0 (RHSA-2022:6043)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:6043 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. N...

.NET 6.0 Update - August 9, 2022 (KB5016990)

None None...

PT-2022-7018 · Microsoft +6 · Net 6.0 +7

Name of the Vulnerable Software and Affected Versions: .NET Core 3.1 versions 3.1.0 through 3.1.27 .NET 6.0 versions 6.0.0 through 6.0.7 Description: An information disclosure issue exists due to incorrect restriction of XML external entity references, potentially allowing a remote attacker to...

Security fix for the ALT Linux 10 package dotnet-bootstrap-6.0 version 6.0.7-alt1

Aug. 5, 2022 Vitaly Lipatov 6.0.7-alt1 - The .NET 6.0.7 and .NET SDK 6.0.107 releases - CVE-2022-30184: .NET Information Disclosure Vulnerability - CVE-2022-29117: .NET Denial of Service Vulnerability - CVE-2022-29145: .NET Denial of Service Vulnerability - CVE-2022-23267: .NET Denial of Service...

Design/Logic Flaw

A unverified password change in Fortinet FortiADC version 6.2.0 through 6.2.3, 6.1.x, 6.0.x, 5.x.x allows an authenticated attacker to bypass the Old Password check in the password change form via a crafted HTTP request...

This Week in Spring - August 1st, 2022

Aloha, Spring fans! Welcome to another installment of This Week in Spring! Im still on vacation on the beautiful island of Maui, Hawaii, but I wanted to say hello "aloha!" and share this weeks latest roundup of all thats good and glorious in the wide and wonderful world of Springdom. Funny thing,...

Spring Authorization Server Is Going 1.0

We are excited to announce that weve started preparing for Spring Authorization Server 1.0 with plans to release the GA version in November 2022. It has been just over two years since we initially announced this new project, and we have come a long way since its initial development. The project h...

Moderate: Red Hat Bug Fix Advisory: .NET 6.0 bugfix update

An update for .NET 6.0 is now available for Red Hat Enterprise Linux 9. .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. Bug Fixes and Enhancements: Update .NET 6.0 to SDK 6.0.107 and Runtime...

WordPress Visual Slide Box Builder 3.2.9 SQL Injection

Title: WordPress 6.0 - Visual Slide Box Builder 3.2.9 SQLi Author: nu11secur1ty Date: 07.11.2022 Vendor: https://wphive.com/ Software: https://wphive.com/plugins/wp-visual-slidebox-builder/?pluginversion=3.2.9 Reference:...

Rocky Linux 8 : .NET 6.0 (RLSA-2022:5046)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:5046 advisory. - .NET and Visual Studio Information Disclosure Vulnerability. CVE-2022-30184 Note that Nessus has not tested for this issue but has instead relied only on the...