3967 matches found
RHEL 9 : .NET 6.0 (RHSA-2022:6913)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:6913 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. N...
CVE-2022-41032
A vulnerability was found in dotnet. This flaw allows an attacker to triage a NuGet cache poisoning on Linux via a world-writable cache directory...
dotnet: Nuget cache poisoning on Linux via world-writable cache directory
A vulnerability was found in dotnet. This flaw allows an attacker to triage a NuGet cache poisoning on Linux via a world-writable cache directory...
dotnet: Nuget cache poisoning on Linux via world-writable cache directory
A vulnerability was found in dotnet. This flaw allows an attacker to triage a NuGet cache poisoning on Linux via a world-writable cache directory...
dotnet: Nuget cache poisoning on Linux via world-writable cache directory
A vulnerability was found in dotnet. This flaw allows an attacker to triage a NuGet cache poisoning on Linux via a world-writable cache directory...
dotnet: Nuget cache poisoning on Linux via world-writable cache directory
A vulnerability was found in dotnet. This flaw allows an attacker to triage a NuGet cache poisoning on Linux via a world-writable cache directory...
dotnet: Nuget cache poisoning on Linux via world-writable cache directory
A vulnerability was found in dotnet. This flaw allows an attacker to triage a NuGet cache poisoning on Linux via a world-writable cache directory...
USN-5670-1 dotnet6 vulnerability
Edward Thomson discovered that .NET 6 incorrectly handled permissions for local NuGet cache. A local attacker could possibly use this issue to execute arbitrary code...
October 11, 2022-Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.6.2 for Windows Server 2008 SP2 (KB5018550)
October 11, 2022-Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.6.2 for Windows Server 2008 SP2 KB5018550 Applies to: Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.0 Microsoft .NET Framework 4.6.2 IMPORTANT This update is included in the Security and Quality Rollup that's...
October 11, 2022-KB5018545 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H2
None None...
NuGet Client 安全漏洞
NuGet Client is the NuGet client tool. Includes Visual Studio extensions, command line tools, and msbuild support. A security vulnerability exists in NuGet Client. The following products and versions are affected: .NET 6.0, .NET Core 3.1,Microsoft Visual Studio 2019 version 16.11 includes 16.0 -...
October 11, 2022-KB5018515 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server 2016
None None...
October 11, 2022-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB5018548)
October 11, 2022-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 KB5018548 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.7.1 Microsoft .NET Framework 4.7.2...
PT-2022-7017 · Microsoft +7 · Net Core 3.1 +9
Name of the Vulnerable Software and Affected Versions: - NuGet versions 6.3.0 and earlier - NuGet versions 6.2.1 and earlier - NuGet versions 6.0.2 and earlier - NuGet versions 5.11.2 and earlier - NuGet versions 5.9.2 and earlier - NuGet versions 5.7.2 and earlier - NuGet versions 4.9.5 and...
October 11, 2022-KB5018544 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H1
None None...
CVE-2022-26929
A remote code execution vulnerability was found in dotnet. This flaw allows an attacker to perform arbitrary code execution, leading to a local attack on a user’s system...
September 20, 2022-KB5017858 Cumulative Update Preview for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H2
None None...
dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion.
.NET Core and Visual Studio Denial of Service Vulnerability...
.NET 6.0 security and bugfix update
An update is available for dotnet6.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a managed-software framework. It implements a subset of the .NET...
RHEL 8 : .NET 6.0 (RHSA-2022:6539)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:6539 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. N...