5196 matches found
Oracle Linux 9 : .NET / 7.0 (ELSA-2023-4642)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4642 advisory. 7.0.110-1.0.1 - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ2228571 Tenable has extracted the preceding description block directly fr...
Oracle Linux 8 : .NET / 7.0 (ELSA-2023-4643)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4643 advisory. 7.0.110-1.0.1 - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ2228571 Tenable has extracted the preceding description block directly fr...
Information Disclosure
ASP.NET Core SignalR and Visual Studio is vulnerable to Information Disclosure. This vulnerability occurs when a user sends a specially crafted message to a SignalR hub. If the message is valid, the user can obtain sensitive information, such as the names of other users in the hub...
CISA Adds Microsoft .NET Vulnerability to KEV Catalog Due to Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency CISA has added a recently patched security flaw in Microsoft's .NET and Visual Studio products to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. Tracked as CVE-2023-38180 CVSS score: 7.5, the...
The vulnerabilities of Microsoft Visual Studio, the Microsoft.NET platform, and the ASP.NET Core platform allow attackers to gain access to confidential information.
The vulnerability of Microsoft Visual Studio, a software development tool, and the Microsoft.NET platform is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Microsoft Visual Studio software and the Microsoft.NET platform lies in insufficient validation of input data, which allows attackers to disclose sensitive information that should be protected.
The vulnerability of the Microsoft Visual Studio software and the Microsoft.NET platform is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be protected...
Ubuntu 22.04 LTS : .NET vulnerabilities (USN-6278-2)
The remote Ubuntu 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6278-2 advisory. USN-6278-1 fixed several vulnerabilities in .NET. This update provides the corresponding updates for Ubuntu 22.04 LTS. Tenable has extracted the precedin...
August Patch Tuesday stops actively exploited attack chain and more
Augusts Patch Tuesday is a lot quieter than it was last month, when Microsoft patched a whopping 130 vulnerabilities. That number went down to 87 this month but it does include two actively exploited vulnerabilities. Lets start by looking at those two: CVE-2023-38180 CVSS score 7.5 out of 10: a...
Security Updates for Microsoft Visual Studio Products (August 2023)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - .NET Core and Visual Studio Denial of Service Vulnerability. CVE-2023-38178 - .NET and Visual Studio Remote Code Execution Vulnerability. CVE-2023-35390 - .NET and Visual...
Security Updates for Microsoft Visual Studio Office Tools (August 2023)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by - Visual Studio Tools for Office Runtime Spoofing Vulnerability. CVE-2023-36897 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...
GHSA-P57V-GV7Q-4XFM .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2023-38178: .NET Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 7.0. This advisory also provides guidance on what developers can do to update their applications to...
.NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2023-38178: .NET Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 7.0. This advisory also provides guidance on what developers can do to update their applications to...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-38180 Microsoft .NET Core and Visual Studio Denial of Service Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors...
Microsoft Patch Tuesday, August 2023 Edition
Microsoft Corp. today issued software updates to plug more than 70 security holes in its Windows operating systems and related products, including multiple zero-day vulnerabilities currently being exploited in the wild. Six of the flaws fixed today earned Microsofts "critical" rating, meaning...
VulnCheck KEV: CVE-2023-38180
Microsoft .NET Core and Visual Studio contain an unspecified vulnerability that allows for denial-of-service DoS...
The vulnerability of the Microsoft Visual Studio software development tool and the Microsoft.NET Framework software platform, related to uncontrolled resource consumption, allows attackers to cause service failures.
The vulnerability of Microsoft Visual Studio, a software development tool, and the Microsoft.NET Framework, a software platform, is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability
Microsoft .NET Core and Visual Studio contain an unspecified vulnerability that allows for denial-of-service DoS...
CVE-2023-38180
.NET and Visual Studio Denial of Service Vulnerability...
