Lucene search
+L

3915 matches found

Github Security Blog
Github Security Blog
added 2026/05/18 7:10 p.m.18 views

Microsoft Security Advisory CVE-2026-42899 – ASP.NET Core Denial of Service Vulnerability

Executive Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0, .NET 9.0, and .NET 10.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Loop with unreachable exit...

7.5CVSS5.7AI score0.0243EPSS
SaveExploits0References5Affected Software12
EUVD
EUVD
added 2026/05/18 7:8 p.m.28 views

EUVD-2026-29571

Microsoft Security Advisory CVE-2026-32175 – .NET Core Tampering Vulnerability...

4.3CVSS5.8AI score0.00711EPSS
SaveExploits0References4
OSV
OSV
added 2026/05/18 7:8 p.m.10 views

GHSA-RG75-Q538-X34V Microsoft Security Advisory CVE-2026-32175 – .NET Core Tampering Vulnerability

Executive Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0, .NET 9.0, and .NET 10.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A tampering vulnerability...

7.5CVSS5.8AI score0.00711EPSS
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/14 7:24 p.m.14 views

Malicious code in dotenvv-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79fd33c6e511ab11f10b1dae91e2f083f486dd020bbf2dca5256eabc904f61b7 Package name dotenvv-tool impersonates the popular dotenv package; index.js is an admitted dummy stub "The real payload is in postinstall.js". The...

5.8AI score
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/05/14 5:44 p.m.13 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: dotnet8.0: aspnetcore-runtime-8.0-8.0.27-1.hum1 aarch64, x8664 aspnetcore-runtime-dbg-8.0-8.0.27-1.hum1 aarch64, x8664 aspnetcore-targeting-pack-8.0-8.0.27-1.hum1 aarch64, x8664...

7.5CVSS5.8AI score0.0243EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/05/14 10:35 a.m.18 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: dotnet9.0: aspnetcore-runtime-9.0-9.0.16-1.hum1 aarch64, x8664 aspnetcore-runtime-dbg-9.0-9.0.16-1.hum1 aarch64, x8664 aspnetcore-targeting-pack-9.0-9.0.16-1.hum1 aarch64, x8664...

7.5CVSS5.8AI score0.0243EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/05/14 7:13 a.m.18 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: dotnet10.0: aspnetcore-runtime-10.0-10.0.8-1.hum1 aarch64, x8664 aspnetcore-runtime-dbg-10.0-10.0.8-1.hum1 aarch64, x8664 aspnetcore-targeting-pack-10.0-10.0.8-1.hum1 aarch64, x8664...

7.5CVSS5.8AI score0.0243EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:0 a.m.6 views

The vulnerability of the .NET software platform, related to executing a loop with an unavailable exit condition, allows a hacker to cause a service failure.

The vulnerability of the .NET software platform lies in the execution of a loop with an exit condition that is not met. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS7.2AI score0.0243EPSS
SaveExploits0References4Affected Software2
Tenable Nessus
Tenable Nessus
added 2026/05/14 12:0 a.m.124 views

Security Update for Microsoft .NET Core (May 2026)

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who...

7.5CVSS6.4AI score0.0243EPSS
SaveExploits0References21
Tenable Nessus
Tenable Nessus
added 2026/05/14 12:0 a.m.8 views

Security Updates for Microsoft Visual Studio Products (May 2026)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. CVE-2026-32177 - A tampering vulnerability exists when .NET Core improperl...

7.3CVSS6.8AI score0.00711EPSS
SaveExploits0References6
Wolfi
Wolfi
added 2026/05/13 7:48 a.m.25 views

CVE-2026-32178 vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

7.5CVSS6.2AI score0.02279EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/05/13 7:48 a.m.27 views

GHSA-VMWF-M9C5-3JVC vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

5.8AI score
SaveExploits0
Chainguard
Chainguard
added 2026/05/13 7:17 a.m.16 views

GHSA-VMWF-M9C5-3JVC vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

5.8AI score
SaveExploits0
Chainguard
Chainguard
added 2026/05/13 7:17 a.m.15 views

CVE-2026-32178 vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

7.5CVSS5.8AI score0.02279EPSS
SaveExploits0
NVD
NVD
added 2026/05/12 6:17 p.m.10 views

CVE-2026-35433

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally...

7.3CVSS0.00662EPSS
SaveExploits0References4
OSV
OSV
added 2026/05/12 6:17 p.m.5 views

CVE-2026-35433

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally...

7.3CVSS7AI score0.00662EPSS
SaveExploits0References4
OSV
OSV
added 2026/05/12 6:17 p.m.8 views

UBUNTU-CVE-2026-35433

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally...

7.3CVSS5.8AI score0.00662EPSS
SaveExploits0References5
OSV
OSV
added 2026/05/12 6:16 p.m.5 views

CVE-2026-32177

Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally...

7.3CVSS7.2AI score0.00551EPSS
SaveExploits0References4
NVD
NVD
added 2026/05/12 6:16 p.m.10 views

CVE-2026-32175

A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the...

4.3CVSS0.00711EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/12 6:16 p.m.9 views

CVE-2026-32177

Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally...

7.3CVSS0.00551EPSS
SaveExploits0References4
Rows per page
Query Builder