35509 matches found
Alibaba Cloud Linux 3 : 0005: net-snmp (ALINUX3-SA-2021:0005)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2021:0005 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-15862: Net-SNMP through 5.7.3 has Improper...
ALSA-2025:7598 Important: .NET 8.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.116 and .NET Runtime...
ALSA-2025:7600 Important: .NET 9.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.106 and .NET Runtime 9.0.5.Securi...
Important: .NET 8.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.116 and .NET Runtime...
CVE-2025-26646
External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network...
CVE-2025-26646
The CVE-2025-26646 entry relates to External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio, enabling spoofing over a network. Connected sources specify affected stack as .NET/Visual Studio tooling and provide concrete patch lines: for .NET 8.0, mitigations...
CVE-2025-26646 .NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability
...
GHSA-H4J7-5RXR-P4WC Microsoft.Build.Tasks.Core .NET Spoofing Vulnerability
Microsoft Security Advisory CVE-2025-26646: .NET Spoofing Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 9.0.xxx and .NET 8.0.xxx SDK. This advisory also provides guidance on what developers can do to update their...
Microsoft.Build.Tasks.Core .NET Spoofing Vulnerability
Microsoft Security Advisory CVE-2025-26646: .NET Spoofing Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 9.0.xxx and .NET 8.0.xxx SDK. This advisory also provides guidance on what developers can do to update their...
2025-05 .NET 9.0.5 Security Update for ARM64 Client (KB5059201)
2025-05 .NET 9.0.5 Security Update for ARM64 Client KB5059201...
2025-05 .NET 9.0.5 Security Update for x64 Client (KB5059201)
2025-05 .NET 9.0.5 Security Update for x64 Client KB5059201...
2025-05 .NET 8.0.16 Security Update for ARM64 Client (KB5059200)
2025-05 .NET 8.0.16 Security Update for ARM64 Client KB5059200...
2025-05 .NET 8.0.16 Security Update for x64 Client (KB5059200)
2025-05 .NET 8.0.16 Security Update for x64 Client KB5059200...
2025-05 .NET 9.0.5 Security Update for x64 Server (KB5059201)
2025-05 .NET 9.0.5 Security Update for x64 Server KB5059201...
2025-05 .NET 8.0.16 Security Update for x64 Server (KB5059200)
2025-05 .NET 8.0.16 Security Update for x64 Server KB5059200...
2025-05 .NET 8.0.16 Security Update for x86 Client (KB5059200)
2025-05 .NET 8.0.16 Security Update for x86 Client KB5059200...
2025-05 .NET 9.0.5 Security Update for x86 Client (KB5059201)
2025-05 .NET 9.0.5 Security Update for x86 Client KB5059201...
golang: net: malformed DNS message can cause infinite loop
A flaw was found in the net package of the Go stdlib. When a malformed DNS message is received as a response to a query, the Lookup functions within the net package can get stuck in an infinite loop. This issue can lead to resource exhaustion and denial of service DoS conditions...
kernel: sysctl: always initialize i_uid/i_gid
In the Linux kernel, the following vulnerability has been resolved: sysctl: always initialize iuid/igid Always initialize iuid/igid inside the sysfs core so setownership can safely skip setting them. Commit 5ec27ec735ba "fs/proc/procsysctl.c: fix the default values of iuid/igid on /proc/sys...