4073 matches found
USN-7427-1 dotnet8, dotnet9 vulnerability
James Newton-King discovered that .NET did not properly limit resource allocation when handling certain HTTP/3 requests. An attacker could possibly use this issue to cause a denial of service...
April 8, 2025-KB5054705 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Microsoft server operating system, version 23H2
None None...
April 8, 2025-KB5055683 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2
None None...
April 8, 2025-KB5055688 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows Server 2022
None None...
Important: dotnet8.0
Issue Overview: Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network. CVE-2025-24070 Affected Packages: dotnet8.0 Issue Correction: Run dnf update dotnet8.0 --releasever 2023.7.20250331 to update your system. New Packages: aarch6...
Important: dotnet8.0
Issue Overview: Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network. CVE-2025-24070 Affected Packages: dotnet8.0 Issue Correction: Run dnf update dotnet8.0 --releasever 2023.7.20250331 or dnf update --advisory ALAS2023-2025-912...
Security Bulletin: Multiple security vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak
Summary LibTIFF is used by IBM Robotic Process Automation for Cloud Pak as part of the .NET Core and Watson NLP CVE-2022-48281, CVE-2023-0800, CVE-2023-0801, CVE-2023-0802, CVE-2023-0803, CVE-2023-0804, . ncurses is used by IBM Robotic Process Automation for Cloud Pak as part of base container...
VulnCheck KEV: CVE-2019-9875
Sitecore CMS and Experience Platform XP contain a deserialization vulnerability in the Sitecore.Security.AntiCSRF module that allows an authenticated attacker to execute arbitrary code by sending a serialized .NET object in the HTTP POST parameter CSRFTOKEN...
March 25, 2025-KB5055063 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2
None None...
[SECURITY] Fedora 40 Update: dotnet8.0-8.0.114-1.fc40
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...
Fedora 41 : dotnet8.0 (2025-adbd75f500)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-adbd75f500 advisory. This is the monthly update for .NET for March 2025. Release Notes: - SDK https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.14/8.0.114.md -...
Fedora 40 : dotnet8.0 (2025-83c147615e)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-83c147615e advisory. This is the monthly update for .NET for March 2025. Release Notes: - SDK https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.14/8.0.114.md -...
CVE-2024-21319 vulnerabilities
Vulnerabilities for packages: dotnet...
GHSA-8G9C-28FC-MCX2 vulnerabilities
Vulnerabilities for packages: dotnet...
GHSA-59J7-GHRG-FJ52 vulnerabilities
Vulnerabilities for packages: dotnet...
CVE-2024-21319 vulnerabilities
Vulnerabilities for packages: dotnet...
GHSA-59J7-GHRG-FJ52 vulnerabilities
Vulnerabilities for packages: dotnet...
GHSA-8G9C-28FC-MCX2 vulnerabilities
Vulnerabilities for packages: dotnet...
RHEL 9 : .NET 9.0 (RHSA-2025:2668)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:2668 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. N...
Improper Verification Of Cryptographic Signature
dotnet-debugger-extensions, dotnet-dump and dotnet-sos are vulnerable to Improper Verification of Cryptographic Signature. The vulnerability is due to insufficient validation mechanisms, allowing an authorized attacker to execute code over a network...