Oracle Linux 8 : .NET / 7.0 (ELSA-2023-6247)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6247 advisory. 7.0.113-1.0.1 - Update to .NET SDK 7.0.113 and Runtime 7.0.13 - Resolves: RHEL-14474 Tenable has extracted the preceding description block directly from the...

RHEL 9 : .NET 7.0 (RHSA-2023:6246)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6246 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. N...

MAI-2023-0006

Large Vision-Language Models VLMs are susceptible to exploitation through typographic visual prompts, a method known as jailbreaking. This vulnerability arises from the VLM's capability to process and interpret text embedded within images, circumventing safety protocols that are typically effecti...

SUSE CVE-2020-1147

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'...

Adobe After Effects Out-of-Bounds Read Vulnerability (CNVD-2023-82673)

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe, which is mainly used for 2D and 3D compositing, animation and visual effects production. An out-of-bounds read vulnerability exists in Adobe After Effects versions 18.4....

Ubuntu 22.04 LTS / 23.04 : .Net regressions (USN-6362-2)

The remote Ubuntu 22.04 LTS / 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6362-2 advisory. USN-6362-1 fixed vulnerabilities in .Net. It was discovered that the fix for CVE-2023-36799 was incomplete. This update fixes the problem. Tenable has...

Ubuntu 23.10 : .Net regressions (USN-6438-2)

The remote Ubuntu 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6438-2 advisory. USN-6438-1 fixed vulnerabilities in .Net. It was discovered that the fix for CVE-2023-36799 was incomplete. This update fixes the problem. Tenable has extracted the...

Oracle Business Intelligence Enterprise Edition (OAS 7.0) (October 2023 CPU)

The version of Oracle Business Intelligence Enterprise Edition OAS 7.0.0.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the October 2023 CPU advisory, including the following: - Vulnerability in the Oracle Business Intelligence Enterprise Edition product o...

Ubuntu 23.10 : .NET vulnerabilities (USN-6438-1)

The remote Ubuntu 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6438-1 advisory. Kevin Jones discovered that .NET did not properly process certain X.509 certificates. An attacker could possibly use this issue to cause a denial of service...

Microsoft Visual Studio Uninitialized Resource Disclosure

The vulnerability of the Microsoft Visual Studio software development tool is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

Security Updates for Microsoft Visual Studio Products (October 2023)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple denial of service vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application services...

Microsoft Visual Studio .NET Core DoS

The vulnerability of the Microsoft Visual Studio software and the .NET Core software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Microsoft Visual Studio .NET Information Disclosure

The vulnerability of the Microsoft Visual Studio software and the .NET Core software platform is related to the lack of protection for sensitive data. Exploiting this vulnerability can allow attackers to access confidential information...

OPENSUSE-SU-2023:0298-1 Security update for opera

This update for opera fixes the following issues: - Update to 103.0.4928.16 CHR-9416 Updating Chromium on desktop-stable- branches CHR-9433 Update Chromium on desktop-stable-117-4928 to 117.0.5938.89 CHR-9449 Update Chromium on desktop-stable-117-4928 to 117.0.5938.132 DNA-110337 Opera Intro...

Microsoft Visual Studio Name Reference Arbitrary File Write

The vulnerability of the Microsoft Visual Studio software relates to the use of a name with an incorrect reference. Exploiting this vulnerability could allow a malicious actor to write arbitrary files into the system remotely...

Microsoft Visual Studio Information Disclosure

The vulnerability of the Microsoft Visual Studio software relates to insufficient protection of sensitive data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Microsoft Visual Studio Information Disclosure

The vulnerability of the Microsoft Visual Studio software relates to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker to disclose confidential information...

Microsoft Visual Studio Privilege Escalation

The vulnerability of the Microsoft Visual Studio software development tool is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Microsoft Visual Studio Information Disclosure

The vulnerability of the Microsoft Visual Studio software development tool is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to disclose confidential information...

KLA61353 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in HTTP/2 protocol can be exploited remotely to cause...