1278 matches found
Microsoft .NET Framework Remote Code Execution Vulnerability (CNVD-2016-02244)
Microsoft .NET Framework is a comprehensive and consistent programming model developed by Microsoft Corporation USA and a development platform for building Windows, Windows Store, Windows Phone, Windows Server and Microsoft Azure Windows Store, Windows Phone, Windows Server, and Microsoft Azure...
CVE-2016-0148
Microsoft .NET Framework 4.6 and 4.6.1 mishandles library loading, which allows local users to gain privileges via a crafted application, aka ".NET Framework Remote Code Execution Vulnerability."...
April 12, 2016 — KB3147461 (OS Build 10240.16769)
None None...
Microsoft .NET Framework XML Validation Security Feature Bypass Vulnerability
Microsoft .NET Framework is a comprehensive and consistent programming model developed by Microsoft Corporation USA and a development platform for building Windows, Windows Store, Windows Phone, Windows Server and Microsoft Azure Windows Store, Windows Phone, Windows Server, and Microsoft Azure...
Cumulative update for Windows 10 Version 1511 and Windows Server 2016 Technical Preview 4: March 8, 2016
None None...
CVE-2016-0047
WinForms in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to obtain sensitive information from process memory via crafted icon data, aka "Windows Forms Information Disclosure Vulnerability."...
CVE-2016-0033
Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 does not prevent recursive compilation of XSLT transforms, which allows remote attackers to cause a denial of service performance degradation via crafted XSLT data, aka ".NET Framework Stack Overflow Denial of Service...
Cumulative update for Windows 10: February 9, 2016
None None...
The vulnerability of the Microsoft .NET Framework software platform allows a perpetrator to inject arbitrary web or HTML code.
The vulnerability of the ASP.NET software platform, Microsoft .NET Framework, exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject any desired web or HTML code using a specially crafted variable value...
The vulnerability of the Microsoft .NET Framework software platform, which allows a hacker to read arbitrary files
The vulnerability of the XML DTD parser component in the Microsoft .NET Framework is related to the lack of protection for operational data. Exploiting this vulnerability allows an attacker to remotely read arbitrary files by creating external declarations on XXE objects...
Microsoft .NET Framework Security Mechanism Bypass Vulnerability
Microsoft .NET Framework is a popular software development toolkit. A security mechanism bypass vulnerability exists in Microsoft .NET Framework versions 2.0 SP2, 3.5, and 3.5.1, which allows remote attackers to bypass the ASLR security mechanism via a crafted web site...
The vulnerability of the Microsoft .NET Framework software platform allows a perpetrator to execute arbitrary code or circumvent existing access restrictions.
The vulnerability of the Microsoft .NET Framework software platform arises due to buffer overflows. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or circumvent existing access restrictions using a specially crafted application...
The vulnerability of the Microsoft .NET Framework software allows a hacker to cause a service failure for a web resource based on ASP.NET.
The vulnerability of the Microsoft .NET Framework software platform is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure for a web resource based on ASP.NET, using a specially crafted request...
PT-2015-2030 · Microsoft · .Net Framework
Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 2.0 SP2 through 4.6 Description: The issue is caused by improper object counting before performing an array copy, allowing remote attackers to execute arbitrary code or bypass Code Access Security restriction...
Microsoft .NET Framework Elevation of Privilege Vulnerability (CNVD-2015-05323)
Microsoft .NET Framework is a comprehensive and consistent programming model developed by Microsoft Corporation USA and a development platform for building Windows, Windows Store, Windows Phone, Windows Server and Microsoft Azure Windows Store, Windows Phone, Windows Server, and Microsoft Azure...
Microsoft .NET Framework Elevation of Privilege Vulnerability (CNVD-2015-05324)
Microsoft .NET Framework is a comprehensive and consistent programming model developed by Microsoft Corporation USA and a development platform for building Windows, Windows Store, Windows Phone, Windows Server and Microsoft Azure Windows Store, Windows Phone, Windows Server, and Microsoft Azure...
Microsoft .NET Custom XML Data Processing Denial of Service Vulnerability
Microsoft .NET Framework is a system distributed by Microsoft to help developers build WEB-based applications. A security vulnerability exists in the Microsoft .NET Framework that allows remote attackers to exploit a vulnerability by submitting special data to trigger a recursion that consumes a...
Microsoft ASP.NET Information Disclosure Vulnerability
Microsoft .NET Framework is a system distributed by Microsoft to help developers build WEB-based applications. An information disclosure vulnerability exists in Microsoft ASP.NET. On systems with the customErrors configuration disabled, ASP.NET errors when processing requests for certain...
CVE-2013-3861
Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 allows remote attackers to cause a denial of service application crash or hang via crafted character sequences in JSON data, aka "JSON Parsing Vulnerability."...
CVE-2013-0073
The Windows Forms aka WinForms component in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly restrict the privileges of a callback function during object creation, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application XBAP or 2 ...