40 matches found
Vulnerabilities fixed in Microsoft Developer Tools
Microsoft has fixed vulnerabilities in several Developer Tools. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS. Remote code execution Administrator/Root privileges Remote code execution...
CVE-2023-29337
NuGet Client Remote Code Execution Vulnerability...
Microsoft NuGet Client 安全漏洞
NuGet Client is the NuGet client tool. Includes Visual Studio extensions, command line tools, and msbuild support. A security vulnerability exists in Microsoft NuGet Client. The following products and versions are affected: NuGet 6.2.3,NuGet 6.4.1,NuGet 6.5.0,NuGet 6.3.2,NuGet 6.0.4,NuGet 6.6.0...
UBUNTU-CVE-2023-29337
NuGet Client Remote Code Execution Vulnerability...
Fedora 35 : dotnet3.1 (2022-7f5f9ede26)
The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-7f5f9ede26 advisory. This is the October 2022 release of .NET Core 3.1 This updates .NET Core 3.1 SDK to 3.1.424 and Runtime to 3.1.30. This includes fixes for CVE-2022-41032...
Oracle Linux 9 : dotnet7.0 (ELSA-2022-8434)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8434 advisory. 7.0.100-0.5.rc2.0.1 - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier Orabug: 34671152 7.0.100-0.5.rc2 - Add lldb as a build...
AlmaLinux 9 : dotnet7.0 (ALSA-2022:8434)
The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:8434 advisory. - NuGet Client Elevation of Privilege Vulnerability. CVE-2022-41032 Note that Nessus has not tested for this issue but has instead relied only on the application's...
Privilege Escalation
NuGet Client is vulnerable to Privilege Escalation. The vulnerability exists because the library does not properly handle a world-writable cache directory, allowing an attacker to inject and execute malicious code, resulting in the elevation of privilege...
Vulnerabilities fixed in Microsoft Developer Tools
Vulnerabilities have been fixed in Microsoft Developer Tools. The vulnerabilities allow a local malicious person to perform attacks that result in the following categories of damage: Remote code execution User rights. Access to sensitive data Increased user privileges The tables below provide an...
Security Updates for Microsoft .NET Core (October 2022)
A privilege escalation vulnerability exists in .NET core 6.0 6.0.10 and .NET Core 3.1 3.1.30. An authenticated, local attacker can exploit this, via the NuGet client, to cause the user to execute arbitrary code. Note that Nessus has not tested for this issue but has instead relied only on the...
CVE-2022-41032
NuGet Client Elevation of Privilege Vulnerability...
CVE-2022-41032
NuGet Client Elevation of Privilege Vulnerability...
Privilege escalation
NuGet Client Elevation of Privilege Vulnerability...
EUVD-2022-7094
NuGet Client Elevation of Privilege Vulnerability...
CVE-2022-41032
NuGet Client Elevation of Privilege Vulnerability...
CVE-2022-41032 NuGet Client Elevation of Privilege Vulnerability
...
KLA20005 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Visual Studio Code...
CVE-2022-41032
NuGet Client Elevation of Privilege Vulnerability...
NuGet Client 安全漏洞
NuGet Client is the NuGet client tool. Includes Visual Studio extensions, command line tools, and msbuild support. A security vulnerability exists in NuGet Client. The following products and versions are affected: .NET 6.0, .NET Core 3.1,Microsoft Visual Studio 2019 version 16.11 includes 16.0 -...
