Lucene search
K

6547 matches found

Exploit DB
Exploit DB
added 2024/03/03 12:0 a.m.285 views

Windows PowerShell - Event Log Bypass Single Quote Code Execution

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WINDOWSPOWERSHELLSINGLEQUOTECODEEXECEVENTLOGBYPASS.txt + twitter.com/hyp3rlinx + ISR: ApparitionSec Vendor www.microsoft.com Product Microsoft Windows PowerShell Built on the...

7.4AI score
Exploits0
Redos
Redos
added 2024/02/29 12:0 a.m.26 views

ROS-20240226-02

A vulnerability in Microsoft's .NET Framework software platform is related to incorrectly restricting XML links to external objects. external objects. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to sensitive information...

5.9CVSS6.3AI score0.00762EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2024/02/15 2:41 p.m.35 views

Important: Red Hat Security Advisory: .NET 8.0 security update

An update for .NET 8.0 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

7.5CVSS7.2AI score0.0291EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2024/02/15 7:31 a.m.31 views

Important: Red Hat Security Advisory: .NET 8.0 security update

An update for .NET 8.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

7.5CVSS7.2AI score0.0291EPSS
Exploits0References4
AlmaLinux
AlmaLinux
added 2024/02/15 12:0 a.m.37 views

Important: .NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.102 and .NET Runtime 8.0.2...

7.5CVSS7AI score0.0291EPSS
Exploits0References6
OSV
OSV
added 2024/02/15 12:0 a.m.34 views

ALSA-2024:0827 Important: .NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.102 and .NET Runtime 8.0.2...

7.5CVSS7.6AI score0.0291EPSS
Exploits0References6
OSV
OSV
added 2024/02/15 12:0 a.m.30 views

ALSA-2024:0848 Important: .NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.102 and .NET Runtime 8.0.2...

7.5CVSS7.6AI score0.0291EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2024/02/14 8:57 a.m.36 views

Important: Red Hat Security Advisory: .NET 6.0 security, bug fix, and enhancement update

An update for .NET 6.0 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

7.5CVSS7.2AI score0.0291EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2024/02/14 8:57 a.m.1 views

dotnet: Denial of Service in SignalR server

A denial of service vulnerability is present in the .NET applications utilizing SignalR, which a malicious client can exploit. The issue arises from inadequate validation of user-supplied input in .NET. This flaw allows a remote attacker to trigger a denial of service DoS attack by providing...

7.5CVSS5.8AI score0.02393EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2024/02/13 6:55 p.m.46 views

Important: Red Hat Security Advisory: dotnet7.0 security update

An update for dotnet7.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

9.1CVSS7.2AI score0.0291EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2024/02/13 6:54 p.m.45 views

Important: Red Hat Security Advisory: dotnet6.0 security update

An update for dotnet6.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

7.5CVSS7.2AI score0.0291EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2024/02/13 6:44 p.m.31 views

Important: Red Hat Security Advisory: dotnet6.0 security update

An update for dotnet6.0 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

7.5CVSS7.2AI score0.0291EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2024/02/13 6:44 p.m.2 views

dotnet: Denial of Service in X509Certificate2

A denial of service vulnerability exists in .NET applications with OpenSSL support when parsing X509 certificates. The issue arises from inadequate validation of user-supplied input in .NET. This flaw allows a remote attacker to trigger a denial of service DoS attack by providing specially crafte...

7.5CVSS5.8AI score0.0291EPSS
Exploits0References4
Microsoft KB
Microsoft KB
added 2024/02/13 8:0 a.m.97 views

Cumulative Update 14 for Exchange Server 2019 (KB5035606)

Cumulative Update 14 for Exchange Server 2019 KB5035606 Important: This regularly scheduled cumulative update contains all the security fixes of the security updates in February and previous security updates. Cumulative Update 14 for Microsoft Exchange Server 2019 was released on February 13, 202...

9.8CVSS10AI score0.06145EPSS
Exploits0
Microsoft KB
Microsoft KB
added 2024/02/13 12:0 a.m.7 views

February 13, 2024-KB5034684 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H2

February 13, 2024-KB5034684 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H2 Release Date: February 13, 2024 Version: .NET Framework 3.5, 4.8 and 4.8.1 IMPORTANT This update is included in the Cumulative Update that's dated February 13, 2024. Parts of this updat...

6.6AI score
Exploits0
Microsoft KB
Microsoft KB
added 2024/02/13 12:0 a.m.5 views

February 13, 2024-KB5034614 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server 2016

February 13, 2024-KB5034614 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server 2016 Release Date: February 13, 2024 Version: .NET Framework 4.8 The February 13, 2024 update for Windows 10, version 1607 and Windows Server 2016 includes security and cumulative...

6.6AI score
Exploits0
CNNVD
CNNVD
added 2024/02/13 12:0 a.m.3 views

Microsoft .NET Security Vulnerabilities

Microsoft .NET is a software framework from Microsoft Corporation USA dedicated to agile software development, rapid application development, platform-agnosticism, and web transparency. A security vulnerability exists in Microsoft . The following products and versions are affected: ASP.NET Core...

7.5CVSS6.5AI score0.02393EPSS
Exploits0References4
Microsoft KB
Microsoft KB
added 2024/02/13 12:0 a.m.4 views

February 13, 2024-KB5034682 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows Server 2022

February 13, 2024-KB5034682 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows Server 2022 Release Date: February 13, 2024 Version: .NET Framework 3.5, 4.8 and 4.8.1 Summary This article describes the security and cumulative update for 3.5, 4.8 and 4.8.1 for Windows Server 2022...

6.6AI score
Exploits0
OSV
OSV
added 2024/02/13 12:0 a.m.27 views

ALSA-2024:0806 Important: dotnet7.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.116 and .NET Runtime 7.0.16...

7.5CVSS7.6AI score0.0291EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2024/02/02 9:4 p.m.48 views

PowerShell is subject to remote code execution vulnerability

Microsoft Security Advisory CVE-2020-0605: .NET Framework Remote Code Execution Vulnerability Executive Summary A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file. An attacker who successfully exploited the vulnerability coul...

9.3CVSS8AI score0.34056EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder