Lucene search
K

6526 matches found

OSV
OSV
added 2025/03/11 12:0 a.m.12 views

ALSA-2025:2667 Important: .NET 9.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.104 and .NET Runtime 9.0.3.Securi...

7CVSS6.9AI score0.00279EPSS
Exploits1References4
AlmaLinux
AlmaLinux
added 2025/03/11 12:0 a.m.17 views

Important: .NET 8.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.114 and .NET Runtime...

7CVSS6.7AI score0.00279EPSS
Exploits1References4
CNVD
CNVD
added 2025/02/26 12:0 a.m.9 views

Microsoft .NET Remote Code Execution Vulnerability

The Microsoft .NET Framework is Microsoft's new development platform after Windows DNA, which runs in a system virtual machine and provides new functionality and development tools for Application Programming Interfaces APIs. A remote code execution vulnerability exists in Microsoft .NET, which ca...

7.5CVSS7.5AI score0.0082EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/14 3:37 p.m.6 views

CVE-2025-0556

In Progress® Telerik® Report Server, versions prior to 2025 Q1 11.0.25.211 when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local netwo...

8.8CVSS6.4AI score0.00148EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/02/14 12:0 a.m.22 views

Progress Telerik Report Server < 11.0.25.211 Cleartext Transmission

The version of Progress Telerik Report Server installed on the remote host is affected by an cleartext transmission vulnerability. In Progress® Telerik® Report Server, versions prior to 2025 Q1 11.0.25.211 when using the older .NET Framework implementation, communication of non-sensitive...

8.8CVSS5.6AI score0.00148EPSS
Exploits0References2
CVE
CVE
added 2025/02/12 3:11 p.m.60 views

CVE-2025-0556

In Progress Telerik Report Server, before 2025 Q1 (11.0.25.211) using the older .NET Framework implementation, the communication of non-sensitive information between the service agent process and the app host process happens over an unencrypted tunnel, exposing it to potential local network traff...

8.8CVSS6.5AI score0.00148EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/02/12 12:0 a.m.3 views

PT-2025-6792 · Progress · Progress Telerik Report Server

Name of the Vulnerable Software and Affected Versions: In Progress Telerik Report Server versions prior to 2025 Q1 11.0.25.211 Description: The issue concerns the communication of non-sensitive information between the service agent process and app host process in In Progress Telerik Report Server...

8.8CVSS6.8AI score0.00148EPSS
Exploits0References5
CISA KEV Catalog
CISA KEV Catalog
added 2025/02/04 12:0 a.m.17 views

Microsoft .NET Framework Information Disclosure Vulnerability

Microsoft .NET Framework contains an information disclosure vulnerability that exposes the ObjRef URI to an attacker, ultimately enabling remote code execution...

7.5CVSS7.3AI score0.93718EPSS
In wildExploits1
RedHat Linux
RedHat Linux
added 2025/01/21 4:19 p.m.3 views

dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

A remote code execution vulnerability was found in .NET. This flaw allows an attacker to load a specially crafted file in .NET...

8.8CVSS6.4AI score0.0194EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/01/16 5:27 p.m.1 views

dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

A remote code execution vulnerability was found in .NET. This flaw allows an attacker to load a specially crafted file in .NET...

8.8CVSS6.4AI score0.0194EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/01/16 5:18 p.m.1 views

dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

A remote code execution vulnerability was found in .NET. This flaw allows an attacker to load a specially crafted file in .NET...

8.8CVSS6.4AI score0.0194EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/01/16 12:0 a.m.63 views

Security Updates for Microsoft .NET Framework (January 2025)

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by multiple denial of service vulnerabilities, as follows: - A remote code execution vulnerability. An attacker can exploit this issue to cause the affected component to execute...

8.8CVSS8.6AI score0.0194EPSS
Exploits0References20
OpenVAS
OpenVAS
added 2025/01/15 12:0 a.m.117 views

Microsoft .NET Framework RCE Vulnerability (KB5049614)

This host is missing an important security update according to Microsoft KB5049614 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

8.8CVSS7.2AI score0.0194EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2025/01/15 12:0 a.m.13 views

Microsoft .NET Framework RCE Vulnerability (KB5050416)

This host is missing an important security update according to Microsoft KB5050416 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

8.8CVSS7.2AI score0.0194EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2025/01/15 12:0 a.m.247 views

Microsoft .NET Framework RCE Vulnerability (KB5050182)

This host is missing an important security update according to Microsoft KB5050182 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

8.8CVSS7.2AI score0.0194EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2025/01/15 12:0 a.m.8 views

Microsoft .NET Framework RCE Vulnerability (KB5050188)

This host is missing an important security update according to Microsoft KB5050188 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

8.8CVSS7.2AI score0.0194EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2025/01/15 12:0 a.m.37 views

Microsoft .NET Framework RCE Vulnerability (KB5049624)

This host is missing an important security update according to Microsoft KB5049624 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

8.8CVSS7.2AI score0.0194EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/01/14 11:51 p.m.6 views

CVE-2025-21176

A remote code execution vulnerability was found in .NET. This flaw allows an attacker to load a specially crafted file in .NET. Mitigation Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affecte...

8.8CVSS8.7AI score0.0194EPSS
Exploits0References4
NCSC
NCSC
added 2025/01/14 7:10 p.m.6 views

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft has fixed vulnerabilities in Visual Studio and .NET. A malicious party could exploit the vulnerabilities to grant themselves elevated privileges, access sensitive data or execute arbitrary code in the victim's context. Successful exploitation requires the malicious party to trick the...

8.8CVSS7.4AI score0.02034EPSS
Exploits0
OSV
OSV
added 2025/01/14 6:15 p.m.3 views

CVE-2025-21173

.NET Elevation of Privilege Vulnerability...

7.3CVSS7.3AI score0.02034EPSS
Exploits0References2
Rows per page
Query Builder