4248 matches found
Tenable Identity Exposure < 3.77.14 Multiple Vulnerabilities (TNS-2025-23)
The version of Tenable Identity Exposure formerly Tenable.ad installed on the remote host is prior to 3.77.14. It therefore contains vulnerable versions of third-party components .NET, SQL Server, and curl. Tenable has upgraded these components to address the potential impact of the issues,...
AlmaLinux 8 : .NET 9.0 (ALSA-2025:18150)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:18150 advisory. dotnet: .NET Information Disclosure Vulnerability CVE-2025-55248 dotnet: .NET Security Feature Bypass Vulnerability CVE-2025-55315 dotnet: .NET Denial of...
AlmaLinux 10 : .NET 8.0 (ALSA-2025:18152)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:18152 advisory. dotnet: .NET Information Disclosure Vulnerability CVE-2025-55248 dotnet: .NET Security Feature Bypass Vulnerability CVE-2025-55315 dotnet: .NET Denial o...
AlmaLinux 9 : .NET 9.0 (ALSA-2025:18151)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:18151 advisory. dotnet: .NET Information Disclosure Vulnerability CVE-2025-55248 dotnet: .NET Security Feature Bypass Vulnerability CVE-2025-55315 dotnet: .NET Denial of...
AlmaLinux 10 : .NET 9.0 (ALSA-2025:18153)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:18153 advisory. dotnet: .NET Information Disclosure Vulnerability CVE-2025-55248 dotnet: .NET Security Feature Bypass Vulnerability CVE-2025-55315 dotnet: .NET Denial o...
Nation-State Hackers Deploy New Airstalk Malware in Suspected Supply Chain Attack
A suspected nation-state threat actor has been linked to the distribution of a new malware called Airstalk as part of a likely supply chain attack. Palo Alto Networks Unit 42 said it's tracking the cluster under the moniker CL-STA-1009 , where "CL" stands for cluster and "STA" refers to...
CVE-2025-61959
Prior to September 19, 2025, the Hospital Manager Backend Services returned verbose ASP.NET error pages for invalid WebResource.axd requests, disclosing framework and ASP.NET version information, stack traces, internal paths, and the insecure configuration 'customErrors mode="Off"', which could...
Vertikal Systems Hospital Manager Backend Services 安全漏洞
Vertikal Systems Hospital Manager Backend Services is a hospital information management system from Vertikal Systems, Romania. A security vulnerability exists in Vertikal Systems Hospital Manager Backend Services that originates from the return of a detailed ASP.NET error page, which could lead t...
October 28, 2025-KB5067931 Cumulative Update Preview for .NET Framework 3.5 and 4.8.1 for Windows 11, version 25H2
None None...
Linux Distros Unpatched Vulnerability : CVE-2025-55248
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network. CVE-2025-55248 Note...
BIT-DOTNET-SDK-2025-55247 .NET Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
BIT-DOTNET-2025-55247 .NET Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
Amazon Linux 2023 : aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0 (ALAS2023-2025-1230)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1230 advisory. Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally. CVE-2025-55247 Inadequate encryption strength in .NET, .NET...
Critical: dotnet8.0
Issue Overview: Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally. CVE-2025-55247 Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a...
Critical: dotnet9.0
Issue Overview: Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally. CVE-2025-55247 Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a...
The vulnerability of Microsoft’s software platforms such as the .NET Framework and .NET, as well as Microsoft Visual Studio, relates to insufficiently secure data encryption. This allows attackers to disclose sensitive information that should be protected.
The vulnerability of Microsoft’s software platforms, such as the .NET Framework, .NET, and Microsoft Visual Studio, is related to insufficient data encryption. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
The vulnerability of the ASP.NET Core software platform, related to deficiencies in HTTP request processing, allows attackers to circumvent existing security restrictions.
The vulnerability of the ASP.NET Core software platform is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
RHSA-2025:18256 Red Hat Security Advisory: .NET 8.0 security update
Bulletin has no description...