Microsoft .NET Framework 安全漏洞

Microsoft .NET Framework is a comprehensive and consistent programming model from Microsoft Corporation USA and a development platform. The platform includes the C and Visual Basic programming languages, a public language runtime library, and an extensive class library. A security vulnerability...

CVE-2022-41089: Undefined Security Weakness

.NET Framework Remote Code Execution Vulnerability...

CVE-2022-41089

CVE-2022-41089 is a .NET Remote Code Execution vulnerability affecting .NET Core 3.1, .NET 6.0, and .NET 7.0 runtimes when using WinForms/WPF. The root cause involves parsing of crafted XPS files that can cause arbitrary code execution. The associated GitHub advisory (GHSA-2C7V-QCJP-4MG2) confirm...

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft has fixed vulnerabilities in the various Developer Tools. The vulnerabilities allow a malicious party to execute attacks that result in the following categories of damage: Circumvention of security measure. Remote code execution User rights Increased user privileges The vulnerability in...

CVE-2022-41089 .NET Framework Remote Code Execution Vulnerability

...

December 13, 2022-KB5021084 Cumulative Update for .NET Framework 3.5 and 4.8 for Azure Stack HCI, version 22H2

None None...

CVE-2022-41089

.NET Framework Remote Code Execution Vulnerability...

CVE-2022-41089 .NET Framework Remote Code Execution Vulnerability

...

Security Updates for Microsoft .NET Framework (September 2022)

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by a remote code execution vulnerability. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security...

Security Updates for Microsoft .NET Framework (January 2022)

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by a denial of service vulnerability. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates...

Security Updates for Microsoft .NET Framework (February 2021)

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by a denial of service vulnerability. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates...

Wodat - Windows Oracle Database Attack Toolkit

Simple port of the popular Oracle Database Attack Tool ODAT https://github.com/quentinhardy/odat to C .Net Framework. Credit to https://github.com/quentinhardy/odat as lots of the functionality are ported from his code. Perform password based attacks e.g. username as password, username list again...

Security Updates for Microsoft .NET Framework (May 2022)

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by a denial of service vulnerability that is caused by a local user opening a specially crafted file. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks i...

Moderate: Red Hat Security Advisory: dotnet7.0 security, bug fix, and enhancement update

An update for dotnet7.0 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Information Disclosure

System.Data.SqlClient and Microsoft.Data.SqlClient packages in the .NET framework are vulnerable to information disclosure. The vulnerability occurs during heavy load, which lets an attacker access arbitrary data from asynchronously executed queries...

Security Updates for Microsoft .NET Framework (November 2022)

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by an information disclosure vulnerability in the System.Data.SqlClient and Microsoft.Data.SqlClient packages. A timeout occurring under high load can cause incorrect data to be...

CVE-2022-41064

.NET Framework Information Disclosure Vulnerability...

Information disclosure

.NET Framework Information Disclosure Vulnerability...

CVE-2022-41064

.NET Framework Information Disclosure Vulnerability...

CVE-2022-41064

CVE-2022-41064 is a .NET Framework information disclosure vulnerability with CVSS v3.1 base score 5.8 (AV:A, AC:H, PR:L, UI:N, S:C, C:H). It could allow a remote authenticated attacker to obtain sensitive information by sending a specially crafted request. In IBM contexts, the vulnerability affec...