151 matches found
CVE-2025-55247 .NET Elevation of Privilege Vulnerability
...
GHSA-Q5R6-9QWQ-G2WJ Amazon.IonDotnet is vulnerable to Denial of Service attacks
Summary Amazon.IonDotnet is a library for the Dotnet language that is used to read and write Amazon Ion data. An issue exists where, under certain circumstances, the library could an infinite loop, resulting in denial of service. As of August 20, 2025, this library has been deprecated and will no...
AlmaLinux 10 : .NET 9.0 (ALSA-2025:8816)
The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:8816 advisory. dotnet: .NET Remote Code Vulnerability CVE-2025-30399 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. Note th...
Linux Distros Unpatched Vulnerability : CVE-2025-21173
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - .NET Elevation of Privilege Vulnerability CVE-2025-21173 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C...
USN-7509-1 dotnet8, dotnet9 vulnerability
It was discovered that .NET did not properly handle file names and paths under certain conditions. An attacker could possibly use this issue to perform spoofing over a network...
USN-7427-1 dotnet8, dotnet9 vulnerability
James Newton-King discovered that .NET did not properly limit resource allocation when handling certain HTTP/3 requests. An attacker could possibly use this issue to cause a denial of service...
Improper Authentication
Overview Microsoft.AspNetCore.App.Runtime.win-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Improper Authentication in the RefreshSignInAsync...
dotnet: .NET Elevation of Privilege Vulnerability
An elevation of privilege vulnerability was found in .NET. This flaw allows an attacker to write a specially crafted file in the security context of the local system...
dotnet: .NET Elevation of Privilege Vulnerability
An elevation of privilege vulnerability was found in .NET. This flaw allows an attacker to write a specially crafted file in the security context of the local system...
dotnet: .NET and Visual Studio Remote Code Execution Vulnerability
A remote code execution vulnerability was found in .NET. This flaw allows an attacker to load a specially crafted file in .NET...
UBUNTU-CVE-2025-21173
.NET Elevation of Privilege Vulnerability...
dotnet: .NET Elevation of Privilege Vulnerability
An elevation of privilege vulnerability was found in .NET. This flaw allows an attacker to write a specially crafted file in the security context of the local system...
dotnet: .NET Remote Code Execution Vulnerability
A remote code execution vulnerability was found in .NET. This flaw allows an attacker to load a specially crafted file into a vulnerable application...
dotnet: .NET Elevation of Privilege Vulnerability
An elevation of privilege vulnerability was found in .NET. This flaw allows an attacker to write a specially crafted file in the security context of the local system...
CVE-2024-43499
.NET and Visual Studio Denial of Service Vulnerability...
dotnet: Denial of Service in System.Text.Json
A flaw was found in dotnet. In System.Text.Json, applications that deserialize input to a model with an ExtensionData property can be vulnerable to an algorithmic complexity attack, resulting in a denial of service...
Important: Red Hat Security Advisory: dotnet8.0 security update
An update for dotnet8.0 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
dotnet: DoS when parsing X.509 Content and ObjectIdentifiers
A vulnerability was found in dotNET when Parsing X.509 Content and ObjectIdentifiers. This issue can lead to a denial of service attack...
dotnet: DoS when parsing X.509 Content and ObjectIdentifiers
A vulnerability was found in dotNET when Parsing X.509 Content and ObjectIdentifiers. This issue can lead to a denial of service attack...