151 matches found
MiracleLinux 9 : dotnet6.0-6.0.124-1.el9.ML.1 (AXSA:2023-6561:26)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6561:26 advisory. dotnet: Denial of Service with Client Certificates using .NET Kestrel CVE-2023-36799 Tenable has extracted the preceding description block directly from the...
MiracleLinux 9 : dotnet6.0-6.0.106-1.el9.ML.1 (AXSA:2022-4011:15)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-4011:15 advisory. dotnet: NuGet Credential leak due to loss of control of third party symbol server domain CVE-2022-30184 Tenable has extracted the preceding description block...
MiracleLinux 9 : dotnet9.0-9.0.107-1.el9_6.ML.1 (AXSA:2025-10581:16)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10581:16 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New...
MiracleLinux 9 : dotnet7.0-7.0.110-1.el9.ML.1 (AXSA:2023-6345:24)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6345:24 advisory. dotnet: RCE under dotnet commands CVE-2023-35390 dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack CVE-2023-381...
MiracleLinux 9 : dotnet7.0-7.0.113-1.el9.ML.1 (AXSA:2023-6563:30)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6563:30 advisory. dotnet: Denial of Service with Client Certificates using .NET Kestrel CVE-2023-36799 Tenable has extracted the preceding description block directly from the...
MiracleLinux 8 : dotnet5.0-5.0.204-1.el8.ML.1 (AXSA:2021-2306:07)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2306:07 advisory. dotnet: ASP.NET Core Client Disconnect Denial of Service CVE-2021-31957 Tenable has extracted the preceding description block directly from the MiracleLinux...
MiracleLinux 9 : dotnet7.0-7.0.116-1.el9_3.ML.1 (AXSA:2024-7530:05)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7530:05 advisory. dotnet: Denial of Service in SignalR server CVE-2024-21386 dotnet: Denial of Service in X509Certificate2 CVE-2024-21404 Tenable has extracted the...
MiracleLinux 9 : dotnet7.0-7.0.109-1.el9.ML.1 (AXSA:2023-6231:22)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6231:22 advisory. dotnet: race condition in Core SignInManager PasswordSignInAsync method CVE-2023-33170 Tenable has extracted the preceding description block directly from th...
MiracleLinux 8 : dotnet3.1-3.1.112-1.0.1.el8 (AXSA:2021-1544:03)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1544:03 advisory. dotnet: certificate chain building recursion Denial of Service CVE-2021-1721 Tenable has extracted the preceding description block directly from the...
MiracleLinux 8 : dotnet6.0-6.0.103-4.el8.ML.1 (AXSA:2022-3100:05)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3100:05 advisory. dotnet: ASP.NET Denial of Service via FormPipeReader CVE-2022-24464 dotnet: double parser stack buffer overrun CVE-2022-24512 Tenable has extracted...
MiracleLinux 8 : dotnet9.0-9.0.107-1.el8_10 (AXSA:2025-10025:12)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10025:12 advisory. NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New...
MiracleLinux 9 : dotnet9.0-9.0.104-1.el9_5.ML.1 (AXSA:2025-9766:07)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9766:07 advisory. dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method CVE-2025-24070 Bug Fixes and Enhancements: dotnet: Privilege...
MiracleLinux 9 : dotnet8.0-8.0.114-1.el9_5.ML.1 (AXSA:2025-9760:06)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9760:06 advisory. dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method CVE-2025-24070 Bug Fixes and Enhancements: dotnet: Privilege...
MiracleLinux 8 : dotnet9.0-9.0.106-1.el8_10 (AXSA:2025-9966:11)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9966:11 advisory. dotnet: .NET and Visual Studio Spoofing Vulnerability CVE-2025-26646 Tenable has extracted the preceding description block directly from the MiracleLinux...
TencentOS Server 3: .NET 6.0 (TSSA-2023:0179)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0179 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
BIT-DOTNET-2025-55247 .NET Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
RockyLinux 10 : .NET 8.0 (RLSA-2025:18152)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:18152 advisory. dotnet: .NET Information Disclosure Vulnerability CVE-2025-55248 dotnet: .NET Security Feature Bypass Vulnerability CVE-2025-55315 dotnet: .NET Denial ...
dotnet: .NET Information Disclosure Vulnerability
A flaw exists in certain .NET builds where a man-in-the-middle MITM attacker can prevent or downgrade TLS between a client and an SMTP server. This may cause the client to send credentials or message data over an unencrypted connection, exposing sensitive information to the attacker...
dotnet: .NET Information Disclosure Vulnerability
A flaw exists in certain .NET builds where a man-in-the-middle MITM attacker can prevent or downgrade TLS between a client and an SMTP server. This may cause the client to send credentials or message data over an unencrypted connection, exposing sensitive information to the attacker...
