Security Update for Microsoft .NET Core (November 2023) (CVE-2023-36558)

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by security feature bypass vulnerability as referenced in the vendor advisory. - ASP.NET Core - Security Feature Bypass Vulnerability CVE-2023-36558 Note that Nessus has not tested fo...

Microsoft Office 2016 Multiple Vulnerabilities (KB5002518)

This host is missing an important security update according to Microsoft KB5002518 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

RHEL 9 : dotnet7.0 (RHSA-2023:7255)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7255 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

RHEL 8 : dotnet7.0 (RHSA-2023:7256)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7256 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

RHEL 8 : dotnet8.0 (RHSA-2023:7254)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7254 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

Ubuntu 22.04 LTS / 23.04 / 23.10 : .NET vulnerabilities (USN-6480-1)

The remote Ubuntu 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6480-1 advisory. Barry Dorrans discovered that .NET did not properly implement certain security features for Blazor server forms. An attacker could possib...

Security Updates for Microsoft Excel Products C2R Information Disclosure (November 2023)

The Microsoft Excel Products are missing a security update. It is, therefore, affected by multiple vulnerabilities, as follows: - A remote code execution vulnerability. CVE-2023-36041 - A security feature bypass vulnerability. CVE-2023-36037 Note that Nessus has not tested for these issues but ha...

Moderate: dotnet8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. Security Fixes: dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand CVE-2023-36049 dotnet: ASP.NET Security Feature Bypass...

CVE-2023-36558

ASP.NET Core Security Feature Bypass Vulnerability...

Security feature bypass

ASP.NET Core - Security Feature Bypass Vulnerability...

CVE-2023-36558 ASP.NET Core Security Feature Bypass Vulnerability

...

CVE-2023-36558

ASP.NET Core Security Feature Bypass Vulnerability...

CVE-2023-36560

ASP.NET Security Feature Bypass Vulnerability...

CVE-2023-36560

ASP.NET Security Feature Bypass Vulnerability...

CVE-2023-36413

Microsoft Office Security Feature Bypass Vulnerability...

Security feature bypass

Windows SmartScreen Security Feature Bypass Vulnerability...

CVE-2023-36021 Microsoft On-Prem Data Gateway Security Feature Bypass Vulnerability

...

CVE-2023-36037 Microsoft Excel Security Feature Bypass Vulnerability

...

CVE-2023-36413 Microsoft Office Security Feature Bypass Vulnerability

...

CVE-2023-36560 ASP.NET Security Feature Bypass Vulnerability

...