CVE-2023-4990

Directory traversal vulnerability in MCL-Net versions prior to 4.6 Update Package P01 may allow attackers to read arbitrary files...

CVE-2023-38180

.NET and Visual Studio Denial of Service Vulnerability...

CVE-2023-33127

.NET and Visual Studio Elevation of Privilege Vulnerability...

Remote code execution

.NET and Visual Studio Remote Code Execution Vulnerability...

Ubuntu: Security Advisory (USN-6161-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-21808 .NET and Visual Studio Remote Code Execution Vulnerability

...

acegisecurity:acegi-security (>=0.8.2 <=0.9.0), acegisecurity:acegi-security-cas (=0.9.0) +15108 more potentially affected by CVE-2021-37533 via commons-net:commons-net (>=1.0.0 <=3.8.0)

commons-net:commons-net MAVEN version =1.0.0, =0.8.2, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =1.2.7 and more Source cves: CVE-2021-37533 Source advisory: OSV:GHSA-CGP8-4M63-FHH5...

CVE-2022-34716 .NET Spoofing Vulnerability

...

The vulnerability of the .NET components in the communication protocol library used for connecting components of ASU systems in the Triangle MicroWorks DNP3 Source Code Library platform for managing public distribution and transmission networks. This allows a intruder to cause a service failure.

The vulnerability of .NET components in the communication protocol library used for connecting components of ASU systems in the Triangle MicroWorks DNP3 Source Code Library platform for managing public distribution and transmission networks, such as Schneider Electric Saitel DP RTU Remote Termina...

CVE-2022-30184 .NET and Visual Studio Information Disclosure Vulnerability

...

dotnet: NuGet Credential leak due to loss of control of third party symbol server domain

.NET and Visual Studio Information Disclosure Vulnerability...

PT-2022-7020 · Microsoft +4 · Net Core +10

Name of the Vulnerable Software and Affected Versions: .NET versions prior to 6.0.6 .NET Core versions prior to 3.1.26 NuGet versions prior to 6.2.1 NuGet.exe versions prior to 6.2.1 NuGet.Commands versions prior to 6.2.1 NuGet.CommandLine versions prior to 6.2.1 NuGet.CommandLine.XPlat versions...

CVE-2022-29117

CVE-2022-29117 is described as a denial-of-service vulnerability in Microsoft ASP.NET and Visual Studio. The entry notes a network-exploit path with no authentication required, leading to an availability impact (CVE-2022-29117) with CVSS v3.1 base score 7.5 (HIGH) and CVSS v2.0 base score 5.0 (PA...

GSD-2022-1000967 net: usb: aqc111: Fix out-of-bounds accesses in RX fixup

net: usb: aqc111: Fix out-of-bounds accesses in RX fixup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.4 by commit...

CVE-2021-21801

This vulnerability is present in devicegraphpage.php script, which is a part of the Advantech R-SeeNet web applications. A specially crafted URL by an attacker and visited by a victim can lead to arbitrary JavaScript code execution...

QEMU Resource Management Error Vulnerability (CNVD-2020-42658)

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A security vulnerability exists in the hw/net/e1000ecore.c file in QEMU version 4.2.0. An attacker can exploit this...

Unbreakable Enterprise kernel-container kata-image kata-runtime kata kubernetes kubernetes istio olcne security update

kernel-uek-container 4.14.35-1902.303.5.3.el7 - rds: Deregister all FRWR mr with freemr Hans Westgaard Ry Orabug: 31476202 - Revert 'rds: Do not cancel RDMAs that have been posted to the HCA' Gerd Rausch Orabug: 31475329 - Revert 'rds: Introduce rdsconntopath helper' Gerd Rausch Orabug: 31475329 ...

USN-3903-2 linux-hwe, linux-azure vulnerabilities

USN-3903-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.10. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 18.10 for Ubuntu 18.04 LTS. Jason Wang discovered that the vhost net driver in the Linux kernel contained an out of bounds...

aero-net.com XSS vulnerability

Vulnerable URL: http://www.aero-net.com/index.php?rub=1"...

Information Disclosure

commons-net is vulnerable to information disclosure. The vulnerability is possible because newStringUtf8 in Base64.java does not prevent the storage of sensitive data in a String object which would not be deleted until the JVM performs garbage collection. There is a chance for an attacker to...