5193 matches found
Rocky Linux 8 : .NET 7.0 (RLSA-2024:1308)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:1308 advisory. - .NET and Visual Studio Denial of Service Vulnerability CVE-2024-21392 Note that Nessus has not tested for this issue but has instead relied only on the...
WiX based installers are vulnerable to binary hijack when run as SYSTEM
Summary Burn uses an unprotected C:\Windows\Temp directory to copy binaries and run them from there. This directory is not entirely protected against low privilege users. Details When a bundle runs as SYSTEM user, Burn uses GetTempPathW which points to an insecure directory C:\Windows\Temp to dro...
Code Reviewer
Reviews code Module Options msf use exploit/multi/fileformat/visual/studiovsixexec msf undefinedstudiovsixexec show actions ...actions... msf undefinedstudiovsixexec set ACTION msf undefinedstudiovsixexec show options ...show and set options... msf undefinedstudiovsixexec run This module requires...
The vulnerability of Microsoft Visual Studio Code’s editor, related to access control deficiencies, allows attackers to escalate their privileges.
The vulnerability of Microsoft Visual Studio Code’s editor is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Oracle Linux 9 : .NET / 7.0 (ELSA-2024-1309)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-1309 advisory. - 7.0.117-1.0.1 - Update to .NET SDK 7.0.117 and Runtime 7.0.17 - Port revert 'Disable implicit rejection for RSA PKCS1 95217' patch - 7.0.116-1.0.1 - Update to...
Oracle Linux 9 : .NET / 8.0 (ELSA-2024-1310)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-1310 advisory. - 8.0.103-2.0.1 - Update to .NET SDK 8.0.103 and Runtime 8.0.3 - Disable checking the signature of the last certificate in a chain if the certificate is...
Oracle Linux 8 : .NET / 7.0 (ELSA-2024-1308)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-1308 advisory. 7.0.117-1.0.1 - Update to .NET SDK 7.0.117 and Runtime 7.0.17 - Port Revert 'Disable implicit rejection for RSA PKCS1 95217 patch Tenable has extracted the...
Oracle Linux 8 : .NET / 8.0 (ELSA-2024-1311)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-1311 advisory. 8.0.103-1.0.1 - Update to .NET SDK 8.0.103 and Runtime 8.0.3 - Backport MSBuild locale fix Tenable has extracted the preceding description block directly from t...
The vulnerability of Microsoft Visual Studio, a software development tool, and the .NET software platform lies in the lack of adequate testing of input data. This allows attackers to trigger service failures.
The vulnerability of Microsoft Visual Studio, a software development tool, and the .NET software platform exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to cause system failures...
AlmaLinux 9 : .NET 8.0 (ALSA-2024:1310)
The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:1310 advisory. - .NET and Visual Studio Denial of Service Vulnerability CVE-2024-21392 Note that Nessus has not tested for this issue but has instead relied only on the...
AlmaLinux 8 : .NET 8.0 (ALSA-2024:1311)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:1311 advisory. - .NET and Visual Studio Denial of Service Vulnerability CVE-2024-21392 Note that Nessus has not tested for this issue but has instead relied only on the...
CVE-2024-26165
Visual Studio Code Elevation of Privilege Vulnerability...
CVE-2024-26165
Visual Studio Code Elevation of Privilege Vulnerability...
CVE-2024-21392
.NET and Visual Studio Denial of Service Vulnerability...
CVE-2024-21392
.NET and Visual Studio Denial of Service Vulnerability...
Privilege escalation
Visual Studio Code Elevation of Privilege Vulnerability...
Denial of service
.NET and Visual Studio Denial of Service Vulnerability...
CVE-2024-26165
CVE-2024-26165 is a Visual Studio Code Elevation of Privilege vulnerability. Connected sources (including the NCSC advisory) report an impact of privilege escalation with a CVSS score around 8.8 and note that updates exist to fix the issue. The NCSC guidance explicitly recommends installing the M...
