4070 matches found
CVE-2023-21808
A vulnerability exists in how dotnet reads debugging symbols. Reading a malicious symbols file may result in remote code execution...
Amazon Linux 2023 : aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet (ALAS2023-2023-092)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-092 advisory. .NET Core and Visual Studio Denial of Service Vulnerability. CVE-2022-38013 Tenable has extracted the preceding description block directly from the tested product security advisory. Note that Nessus has...
Security fix for the ALT Linux 10 package dotnet-aspnetcore-3.1 version 3.1.32-alt1
3.1.32-alt1 built March 18, 2023 Vitaly Lipatov in task 316692 March 13, 2023 Vitaly Lipatov - ASP.NET Core 3.1.32 - CVE-2022-38013: .NET Denial of Service Vulnerability...
Security fix for the ALT Linux 10 package dotnet-runtime-5.0 version 5.0.17-alt1
5.0.17-alt1 built March 18, 2023 Vitaly Lipatov in task 316692 March 13, 2023 Vitaly Lipatov - new version 5.0.17 with rpmgs script - CVE-2022-29117: .NET Denial of Service Vulnerability - CVE-2022-29145: .NET Denial of Service Vulnerability - CVE-2022-23267: .NET Denial of Service Vulnerability...
Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.32-alt1
3.1.32-alt1 built March 18, 2023 Vitaly Lipatov in task 316692 March 12, 2023 Vitaly Lipatov - .NET Core 3.1.32 and .NET Core SDK 3.1.426 releases - CVE-2022-41089: .NET Remote Code Execution Vulnerability - CVE-2022-41032: .NET Elevation of Privilege Vulnerability - CVE-2022-38013: .NET Denial o...
Security fix for the ALT Linux 10 package dotnet-runtime-7.0 version 7.0.3-alt1
7.0.3-alt1 built March 18, 2023 Vitaly Lipatov in task 316692 March 13, 2023 Vitaly Lipatov - .NET 7.0.1 - CVE-2023-21808: .NET Remote Code Execution Vulnerability - restore build and pack singlefilehost...
Security fix for the ALT Linux 10 package dotnet-bootstrap-7.0 version 7.0.3-alt1
7.0.3-alt1 built March 18, 2023 Vitaly Lipatov in task 316692 March 13, 2023 Vitaly Lipatov - The .NET 7.0.3 and .NET SDK 7.0.103 releases - CVE-2023-21808: .NET Remote Code Execution Vulnerability...
Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 5.0.17-alt1
5.0.17-alt1 built March 18, 2023 Vitaly Lipatov in task 316692 March 12, 2023 Vitaly Lipatov - new version 5.0.17 with rpmgs script - CVE-2022-29117: .NET Denial of Service Vulnerability - CVE-2022-29145: .NET Denial of Service Vulnerability - CVE-2022-23267: .NET Denial of Service Vulnerability...
.NET 7.0 Update - March 14, 2023 (KB5024672)
None None...
.NET 6.0 Update - Mar 14, 2023 (KB5024670)
None None...
The vulnerability of the Microsoft .NET Framework software platform, related to improper cleaning or release of resources, allows a perpetrator to cause a service failure.
The vulnerability of the Microsoft .NET Framework software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...
PT-2023-15661 · Mongodb · Mongodb .Net/C# Driver
Name of the Vulnerable Software and Affected Versions: MongoDB .NET/C Driver versions prior to and including v2.18.0 Description: Under very specific circumstances, a privileged user is able to cause arbitrary code to be executed, which may cause further disruption to services. This issue is...
Security fix for the ALT Linux 10 package dotnet-bootstrap-6.0 version 6.0.12-alt1
6.0.12-alt1 built Feb. 20, 2023 Vitaly Lipatov in task 315307 Dec. 27, 2022 Vitaly Lipatov - The .NET 6.0.12 and .NET SDK 6.0.112 releases - CVE-2022-41032: .NET Elevation of Privilege Vulnerability - CVE-2022-38013: .NET Denial of Service Vulnerability - CVE-2022-34716: .NET Information Disclosu...
Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.26-alt1
3.1.26-alt1 built Feb. 20, 2023 Vitaly Lipatov in task 315307 Aug. 5, 2022 Vitaly Lipatov - .NET Core 3.1.26 and .NET Core SDK 3.1.420 releases - CVE-2022-30184: .NET Information Disclosure Vulnerability - CVE-2022-29117: .NET Denial of Service Vulnerability - CVE-2022-29145: .NET Denial of Servi...
SUSE CVE-2010-3332
Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Services IIS, provides detailed error codes during decryption attempts, which allows remote attackers to decrypt and modify encrypted View State aka VIEWSTATE for...
SUSE CVE-2011-3415
Open redirect vulnerability in the Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted return URL, aka "Insecure Redirect in...
SUSE CVE-2011-3417
The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0, when sliding expiry is enabled, does not properly handle cached content, which allows remote attackers to obtain access to arbitrary user accounts via a crafted URL, ak...
SUSE CVE-2013-6795
The Updater in Rackspace Openstack Windows Guest Agent for XenServer before 1.2.6.0 allows remote attackers to execute arbitrary code via a crafted serialized .NET object to TCP port 1984, which triggers the download and extraction of a ZIP file that overwrites the Agent service binary...