Lucene search
+L

107 matches found

Github Security Blog
Github Security Blog
added 2024/02/13 9:18 p.m.73 views

NuGet Client Security Feature Bypass Vulnerability

Description Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 7.0 and .NET 8.0. This advisory also provides guidance on what developers can do to update their applications to address this vulnerability. A security feature bypass...

9.8CVSS7.3AI score0.02755EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/01/15 12:0 a.m.13 views

The vulnerability of the Microsoft .NET Framework software platform, related to improper cleaning or release of resources, allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft .NET Framework software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.2AI score0.03578EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/09/14 12:0 a.m.10 views

The vulnerability of the Microsoft .NET Framework software, related to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft .NET Framework software platform is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.01207EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/08/21 12:0 a.m.11 views

The vulnerability of the Microsoft .NET Framework software, related to errors in user interface information representation, allows attackers to perform spear-phishing attacks.

Vulnerability of the Microsoft .NET Framework software platform, related to errors in user interface information presentation. Exploitation of this vulnerability can allow attackers to perform spear-phishing attacks remotely...

7.4CVSS6.8AI score0.0133EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/08/11 12:0 a.m.18 views

The vulnerability of the Microsoft .NET Framework software, related to insufficient validation of input data, allows attackers to escalate their privileges.

The vulnerability of the Microsoft .NET Framework software platform is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

7.5CVSS7.3AI score0.74288EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2023/06/22 12:0 a.m.12 views

The vulnerability of the Microsoft .NET Framework software, related to insufficient validation of input data, allows a perpetrator to cause service failures.

The vulnerability of the Microsoft .NET Framework software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions using specially created data...

7.8CVSS7.2AI score0.0222EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/06/16 12:0 a.m.11 views

Vulnerability of Microsoft .NET Framework, .NET software platforms, and Microsoft Visual Studio development tools, related to insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of Microsoft’s software platforms such as the .NET Framework and .NET, as well as Microsoft Visual Studio, relates to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.7AI score0.01058EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/06/16 12:0 a.m.7 views

The vulnerability of the Microsoft .NET Framework software, related to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft .NET Framework software platform is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.7AI score0.009EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/06/13 12:0 a.m.5 views

Microsoft .NET Core安全漏洞

Microsoft .NET Core is a cross-platform, high-performance, open-source framework for building modern, cloud-enabled, Internet-connected applications from Microsoft Corporation. A security vulnerability exists in Microsoft .NET Core. The following products and versions are affected: Microsoft Visu...

7.5CVSS8.1AI score0.02627EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/02/27 12:0 a.m.20 views

The vulnerability of Microsoft’s .NET Framework and .NET software platforms lies in the insufficient protection of operational data during code debugging, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft .NET Framework and .NET software platforms is related to insufficient protection of sensitive data during code debugging. Exploiting this vulnerability can allow attackers to execute arbitrary code...

7.8CVSS7.6AI score0.01148EPSS
SaveExploits0References4Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/11/28 12:0 a.m.11 views

The vulnerability of the Microsoft.NET Framework, related to the disclosure of information, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft.NET Framework is related to the exposure of information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5.8CVSS6.3AI score0.00747EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/21 12:0 a.m.18 views

The vulnerability of the Microsoft .NET Framework software platform, related to improper cleaning or release of resources, allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft .NET Framework software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.3AI score0.0328EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/05/26 12:0 a.m.10 views

The vulnerability of the Microsoft.NET Framework software, related to insufficient validation of input data, allows a perpetrator to cause service failures.

The vulnerability of the Microsoft.NET Framework is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS6.3AI score0.02589EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.56 views

Microsoft .NET Framework输入验证错误漏洞

Microsoft .NET Framework is a comprehensive and consistent programming model from Microsoft Corporation USA and a Windows Store, Windows Phone, Windows Server, and Microsoft Azure applications. The platform includes the C and Visual Basic programming languages, a public language runtime library,...

7.5CVSS5.7AI score0.0328EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2021/02/23 12:0 a.m.9 views

The vulnerability of the Microsoft.NET Framework, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of the Microsoft.NET Framework platform is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.1AI score0.0384EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/10/29 12:0 a.m.20 views

The vulnerability of the Microsoft .NET Framework software, related to errors in memory object handling, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the Microsoft .NET Framework software platform is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4.7CVSS5.5AI score0.03288EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/02 12:0 a.m.12 views

The vulnerability of the Microsoft .NET Framework software platform, related to insecure management of privileges, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft .NET Framework software platform is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

5.5CVSS7.1AI score0.01129EPSS
SaveExploits0References3
CNVD
CNVD
added 2020/08/13 12:0 a.m.49 views

Microsoft .NET Framework Remote Code Execution Vulnerability (CNVD-2020-62333)

Microsoft .NET Framework is a comprehensive and consistent programming model from Microsoft Corporation USA and a Windows Store, Windows Phone, Windows Server, and Microsoft Azure applications. The platform includes the C and Visual Basic programming languages, a public language runtime library,...

9.3CVSS7.9AI score0.03763EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2020/08/11 12:0 a.m.5 views

PT-2020-3761 · Microsoft · .Net Framework

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework affected versions not specified Description: A remote code execution issue exists due to insufficient input validation in Microsoft .NET Framework. This allows a remote attacker to execute arbitrary code by uploading ...

10CVSS8.2AI score0.03763EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2020/07/17 12:0 a.m.15 views

The vulnerability of the Microsoft .NET Framework software platform, related to deficiencies in access control, allows attackers to exploit their privileges.

The vulnerability of the Microsoft .NET Framework software platform is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to gain enhanced privileges...

7.8CVSS7.2AI score0.02309EPSS
SaveExploits0References2
Rows per page
Query Builder