Lucene search
+L

772 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:30 p.m.8 views

Malicious code in OCI.DotNetSDK.Usage.Net (NuGet)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:30 p.m.8 views

Malicious code in OCI.DotNetSDK.Osuborganizationsubscription.Net (NuGet)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:28 p.m.7 views

Malicious code in auth0.net (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 299295a8f62b96e6336a60ce85d2212185bf0cf424cc548d8bca9f0b14ed85c1 On npm install, package.json's preinstall and preupdate/test hook runs nslookup bkxajsfkvlurhaoeotqbqf3fg2sitbxll.oast.fun. The destination oast.fun ...

6AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/05/14 12:00 a.m.12 views

PT-2024-3642 · Microsoft +7 · Visual Studio +8

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Microsoft .NET affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource. It may allow a remote attacker to cause a denial o...

9.8CVSS6.4AI score0.99999EPSS
SaveExploits21References211
Positive Technologies
Positive Technologies
added 2024/05/14 12:00 a.m.15 views

PT-2024-3644

Name of the Vulnerable Software and Affected Versions .NET and Visual Studio affected versions not specified Description The issue is related to a buffer overflow in the heap, which can be exploited by a remote attacker to cause a denial of service. Recommendations At the moment, there is no...

9.8CVSS8.3AI score0.99999EPSS
SaveExploits21References220
Microsoft KB
Microsoft KB
added 2024/05/14 12:00 a.m.12 views

May 14, 2024-KB5038286 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 11, version 21H2

None None...

6.1AI score
SaveExploits0
OSV
OSV
added 2024/05/14 12:00 a.m.5 views

UBUNTU-CVE-2024-30045

.NET and Visual Studio Remote Code Execution Vulnerability...

6.3CVSS6.7AI score0.01248EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/04/30 12:00 a.m.12 views

Simplcommerce 安全漏洞

Simplcommerce is a .Net based e-commerce platform by the individual developer of Simplcommerce. A security vulnerability exists in Simplcommerce. A remote attacker can exploit the vulnerability to execute arbitrary code in the search bar function via a specially crafted script...

7.1CVSS7.7AI score0.00459EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/04/09 12:00 a.m.8 views

Microsoft .NET和Microsoft Visual Studio 安全漏洞

Microsoft Visual Studio and Microsoft .NET are both products of Microsoft Corporation, USA. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...

7.3CVSS8.1AI score0.02513EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/03/27 12:00 a.m.15 views

The vulnerability of the Microsoft .NET Framework software platform, related to insufficient protection of operational data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft .NET Framework software platform is related to insufficient protection of service data when processing ObjRef objects. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.8CVSS7.6AI score0.98624EPSS
SaveExploits1References2
NCSC
NCSC
added 2024/03/12 12:00 a.m.10 views

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft has fixed vulnerabilities in several Developer tools. A malicious party could exploit the vulnerabilities to cause a Denial-of-Service or grant himself elevated privileges to granted and thereby potentially execute arbitrary code for which the malicious party is not initially authorized...

8.8CVSS9.2AI score0.03065EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2024/03/12 12:00 a.m.9 views

.NET 6.0 Update - March 12, 2024 (KB5036450)

None None...

6.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/03/04 12:00 a.m.13 views

The vulnerability of the Microsoft .NET software platform, related to pointer swapping errors, allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft .NET software platform is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

7.8CVSS7.2AI score0.024EPSS
SaveExploits0References2Affected Software2
RedHat Linux
RedHat Linux
added 2024/02/15 2:41 p.m.7 views

dotnet: Denial of Service in SignalR server

A denial of service vulnerability is present in the .NET applications utilizing SignalR, which a malicious client can exploit. The issue arises from inadequate validation of user-supplied input in .NET. This flaw allows a remote attacker to trigger a denial of service DoS attack by providing...

7.5CVSS5.8AI score0.024EPSS
SaveExploits0References4
Microsoft KB
Microsoft KB
added 2024/02/13 12:00 a.m.11 views

February 13, 2024-KB5034682 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows Server 2022

None None...

6.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/01/24 12:00 a.m.15 views

The vulnerability of the Microsoft Identity library on the Microsoft .NET software platform allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft Identity library in the .net software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

6.8CVSS6.5AI score0.02892EPSS
SaveExploits0References2Affected Software3
NCSC
NCSC
added 2024/01/09 12:00 a.m.11 views

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft has fixed vulnerabilities in several Developer Tools. A malicious party could exploit the vulnerabilities to cause a denial-of-service, or to bypass a security measure, gain bypass, gain elevated privileges and thus potentially execute arbitrary code with SYSTEM privileges. Obtaining...

9.8CVSS7.8AI score0.03913EPSS
SaveExploits1
CNNVD
CNNVD
added 2024/01/09 12:00 a.m.8 views

Microsoft SQL Server Security Vulnerability

Microsoft SQL Server is a large commercial database system from Microsoft that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. An attacker could exploit the vulnerability to bypass certain functionality. The following products and versions are affected:...

8.7CVSS7.3AI score0.0117EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2023/11/22 12:00 a.m.15 views

The vulnerability of the Microsoft .NET Framework software, related to security configuration errors, allows a perpetrator to gain access to the hidden parts of a web application.

The vulnerability of the Microsoft.NET Framework is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to restricted parts of a web application by sending a specially crafted request...

9CVSS7.3AI score0.02913EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2023/11/15 8:38 p.m.14 views

dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms

A security feature bypass vulnerability was found in Blazor forms in ASP.NET in the .NET package...

6.2CVSS5.7AI score0.01085EPSS
SaveExploits0References4
Rows per page
Query Builder