Lucene search
+L

1279 matches found

Positive Technologies
Positive Technologies
added 2024/03/22 12:0 a.m.7 views

PT-2024-2375

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions prior to 4.8.4682.0/4.8.9206.0 Description The vulnerability is related to insufficient protection of service data when processing ObjRef objects, which may allow a remote attacker to gain unauthorized access ...

7.8CVSS8.2AI score0.98624EPSS
SaveExploits1References34
CNNVD
CNNVD
added 2024/03/22 12:0 a.m.11 views

Microsoft .NET Framework 安全漏洞

Microsoft .NET Framework is a comprehensive and consistent programming model from Microsoft Corporation USA and a development platform. The platform includes the C and Visual Basic programming languages, a public language runtime library, and an extensive class library. A security vulnerability...

7.5CVSS7.8AI score0.98624EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/02/13 12:0 a.m.10 views

PT-2024-1913 · Microsoft +8 · .Net Framework +8

Name of the Vulnerable Software and Affected Versions: Microsoft .NET affected versions not specified Description: The issue is related to pointer dereference errors in the Microsoft .NET platform. It can be exploited by a remote attacker to cause a denial of service. Recommendations: At the...

9.8CVSS6.4AI score0.99999EPSS
SaveExploits21References209
Microsoft KB
Microsoft KB
added 2024/02/13 12:0 a.m.12 views

February 13, 2024-KB5034685 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2

None None...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2024/02/13 12:0 a.m.7 views

February 13, 2024-KB5034686 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 11, version 21H2

None None...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2024/02/13 12:0 a.m.13 views

February 13, 2024-KB5034683 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server 2019

None None...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2024/02/13 12:0 a.m.8 views

February 13, 2024-Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 7 Standard and Windows Server 2008 R2 SP1 (KB5034687)

February 13, 2024-Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 7 Standard and Windows Server 2008 R2 SP1 KB5034687 Applies to: Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET...

6.7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:0 a.m.8 views

Vulnerabilities of Microsoft .NET Framework, .NET software platforms, and Microsoft Visual Studio development tools, related to security configuration errors, allow attackers to circumvent existing security restrictions.

The vulnerabilities of Microsoft’s software platforms, such as the .NET Framework, .NET, and Microsoft Visual Studio, are related to security configuration errors. Exploiting these vulnerabilities can allow attackers to circumvent existing security restrictions remotely...

10CVSS7.5AI score0.02755EPSS
SaveExploits0References5Affected Software5
RedHat Linux
RedHat Linux
added 2024/01/10 6:38 p.m.9 views

dotnet: X509 Certificates - Validation Bypass across Azure

A security feature bypass vulnerability exists when Microsoft .NET Framework-based applications use X.509 chain building APIs but do not completely validate the X.509 certificate due to a logic flaw. An attacker could present an arbitrary untrusted certificate with malformed signatures, triggerin...

9.8CVSS6AI score0.02755EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/01/10 3:42 p.m.6 views

dotnet: X509 Certificates - Validation Bypass across Azure

A security feature bypass vulnerability exists when Microsoft .NET Framework-based applications use X.509 chain building APIs but do not completely validate the X.509 certificate due to a logic flaw. An attacker could present an arbitrary untrusted certificate with malformed signatures, triggerin...

9.8CVSS6AI score0.02755EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/01/10 3:42 p.m.7 views

dotnet: Information Disclosure: MD.SqlClient(MDS) & System.data.SQLClient (SDS)

A vulnerability was found in the .NET Framework. This vulnerability exists in the Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data provider where an attackercan perform an AiTM adversary-in-the-middle attack between the SQL client and the SQL server. This may allow the attacker to stea...

8.7CVSS5.8AI score0.0117EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/01/09 12:0 a.m.4 views

Microsoft .NET and Microsoft Visual Studio Security Vulnerabilities

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete development toolset that includes most of the tools needed throughout the software lifecycle. Microsoft .NET is a software framework dedicated to agile software development, rapid application development,...

9.8CVSS8.8AI score0.02755EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/01/09 12:0 a.m.4 views

PT-2024-1054 · Microsoft · .Net Framework

Name of the Vulnerable Software and Affected Versions: .NET Framework affected versions not specified Description: The issue is related to incorrect cleanup or release of resources in the .NET Framework, which can be exploited by a remote attacker to cause a denial of service. This can affect the...

7.8CVSS9.1AI score0.03578EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2024/01/09 12:0 a.m.10 views

Microsoft .NET Framework Security Vulnerabilities

Microsoft .NET Framework is a comprehensive and consistent programming model from Microsoft Corporation USA and a development platform. The platform includes the C and Visual Basic programming languages, a public language runtime library, and an extensive class library. A security vulnerability...

7.5CVSS6.5AI score0.03578EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:0 a.m.7 views

The vulnerability of the Microsoft .NET Framework software platform, and the Microsoft Visual Studio development tools, are related to deficiencies in access control mechanisms, which allow attackers to escalate their privileges.

The vulnerability of the Microsoft .NET Framework software platform, along with the Microsoft Visual Studio development tools, is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

8CVSS7.2AI score0.12512EPSS
SaveExploits0References2Affected Software2
OSV
OSV
added 2023/11/15 12:0 a.m.33 views

ALSA-2023:7253 Moderate: dotnet8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. Security Fixes: dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand CVE-2023-36049 dotnet: ASP.NET Security Feature Bypass...

9.8CVSS7.6AI score0.12512EPSS
SaveExploits0References6
OSV
OSV
added 2023/11/14 12:0 a.m.4 views

UBUNTU-CVE-2023-36049

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability...

9.8CVSS7.1AI score0.12512EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/11/14 12:0 a.m.17 views

Microsoft ASP.NET Core Security Vulnerability

Microsoft ASP.NET Core is a framework of cross-platform open source framework from Microsoft. The framework is used to build cloud-based applications such as Web applications, Internet of Things applications, and mobile backends. A security vulnerability exists in Microsoft ASP.NET Core. An...

8.8CVSS6.5AI score0.02652EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/10/31 2:36 a.m.4 views

SUSE CVE-2019-0980

A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981...

7.5CVSS6.2AI score0.04943EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/10/31 2:31 a.m.4 views

SUSE CVE-2020-1108

A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Core & .NET Framework Denial of Service Vulnerability'...

7.5CVSS6.9AI score0.11684EPSS
SaveExploits0References2
Rows per page
Query Builder