Lucene search
+L

7191 matches found

OSV
OSV
•added 2024/07/09 12:00 a.m.•32 views

ALSA-2024:4439 Moderate: dotnet6.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET 6.0 to SDK 6.0.132 and Runtime 6.0.32...

7.5CVSS6.7AI score0.02741EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/09 12:00 a.m.•4 views

CVE-2024-38081: Improper Link Resolution Before File Access

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability...

7.3CVSS7.3AI score0.01303EPSS
SaveExploits0References1
Kaspersky
Kaspersky
•added 2024/07/09 12:00 a.m.•115 views

KLA70414 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in .NET and Visual Studio can ...

8.8CVSS7.9AI score0.02939EPSS
SaveExploits0References27
AlmaLinux
AlmaLinux
•added 2024/07/09 12:00 a.m.•41 views

Moderate: dotnet6.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.132 and Runtime 6.0.32. Security...

7.5CVSS6.7AI score0.02741EPSS
SaveExploits0References4
Microsoft KB
Microsoft KB
•added 2024/07/09 12:00 a.m.•59 views

July 9, 2024-KB5041025 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Azure Stack HCI, version 22H2

None None...

7.3CVSS7AI score0.01303EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2024/07/09 12:00 a.m.•52 views

July 9, 2024-KB5039892 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Microsoft server operating system, version 23H2

None None...

7.3CVSS7AI score0.01303EPSS
SaveExploits0
NVD
NVD
•added 2024/07/08 3:15 p.m.•50 views

CVE-2024-39677

NHibernate is an object-relational mapper for the .NET framework. A SQL injection vulnerability exists in some types implementing ILiteralType.ObjectToSQLString. Callers of these methods are exposed to the vulnerability, which includes mappings using inheritance with discriminator values; HQL...

9.8CVSS0.00578EPSS
SaveExploits0References5
Mend
Mend
•added 2024/07/08 2:52 p.m.•2 views

CVE-2024-39677

NHibernate is an object-relational mapper for the .NET framework. A SQL injection vulnerability exists in some types implementing ILiteralType.ObjectToSQLString. Callers of these methods are exposed to the vulnerability, which includes mappings using inheritance with discriminator values; HQL...

9.8CVSS0.00578EPSS
SaveExploits0References8
CVE
CVE
•added 2024/07/08 2:52 p.m.•93 views

CVE-2024-39677

NHibernate (.NET) has a SQL injection vulnerability affecting certain implementations of ILiteralType.ObjectToSQLString. Exposed scenarios include: discriminator-based inheritance mappings, HQL queries referencing static application fields, and use of SqlInsertBuilder/SqlUpdateBuilder AddColumn o...

9.8CVSS7.9AI score0.00578EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2024/07/08 2:52 p.m.•28 views

CVE-2024-39677 NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities

NHibernate is an object-relational mapper for the .NET framework. A SQL injection vulnerability exists in some types implementing ILiteralType.ObjectToSQLString. Callers of these methods are exposed to the vulnerability, which includes mappings using inheritance with discriminator values; HQL...

5.9CVSS7.6AI score
SaveExploits0References7
Cvelist
Cvelist
•added 2024/07/08 2:52 p.m.•70 views

CVE-2024-39677 NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities

NHibernate is an object-relational mapper for the .NET framework. A SQL injection vulnerability exists in some types implementing ILiteralType.ObjectToSQLString. Callers of these methods are exposed to the vulnerability, which includes mappings using inheritance with discriminator values; HQL...

5.9CVSS0.00578EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/08 12:00 a.m.•7 views

CVE-2024-39677: Improper Neutralization of Special Elements used in an SQL Command

NHibernate is an object-relational mapper for the .NET framework. A SQL injection vulnerability exists in some types implementing ILiteralType.ObjectToSQLString. Callers of these methods are exposed to the vulnerability, which includes mappings using inheritance with discriminator values; HQL...

9.8CVSS5.9AI score0.00578EPSS
SaveExploits0References1
Redos
Redos
•added 2024/07/03 12:00 a.m.•34 views

ROS-20240702-01

Vulnerabilities in Microsoft Visual Studio software development tool and Microsoft.NET Framework are related to uncontrolled resource consumption. Microsoft.NET Framework is associated with uncontrolled resource consumption. Exploitation of the vulnerability could allow an attacker acting remotel...

7.5CVSS7.6AI score0.14016EPSS
SaveExploits0
OSV
OSV
•added 2024/06/25 1:31 p.m.•15 views

MAL-2024-4658 Malicious code in Stl.Fusion.Ext.Services.Net (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0References1
Microsoft KB
Microsoft KB
•added 2024/06/25 12:00 a.m.•57 views

June 25, 2024-KB5040370 Cumulative Update Preview for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2

None None...

6.1AI score
SaveExploits0
OSV
OSV
•added 2024/06/14 2:00 p.m.•45 views

RLSA-2024:2842 Important: .NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.105 and .NET Runtime 8.0.5...

6.3CVSS6.7AI score0.01688EPSS
SaveExploits0References3
OSV
OSV
•added 2024/06/14 1:59 p.m.•55 views

RLSA-2024:3340 Important: .NET 7.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.119 and .NET Runtime 7.0.19...

6.3CVSS6.7AI score0.01688EPSS
SaveExploits0References3
OSV
OSV
•added 2024/06/14 1:59 p.m.•34 views

RLSA-2024:3345 Important: .NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.105 and .NET Runtime 8.0.5...

6.3CVSS6.7AI score0.01688EPSS
SaveExploits0References3
Rockylinux
Rockylinux
•added 2024/06/14 1:59 p.m.•51 views

.NET 7.0 security update

An update is available for dotnet7.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a managed-software framework. It implements a subset of the .NET...

6.3CVSS6.6AI score0.01688EPSS
SaveExploits0
OSV
OSV
•added 2024/06/04 9:39 a.m.•47 views

BIT-DOTNET-SDK-2024-21409 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability...

7.3CVSS7.4AI score0.02513EPSS
SaveExploits0References3
Rows per page
Query Builder