Cumulative update for Windows 10 Version 1511 and Windows Server 2016 Technical Preview 4: March 8, 2016

None None...

CVE-2016-0047

WinForms in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to obtain sensitive information from process memory via crafted icon data, aka "Windows Forms Information Disclosure Vulnerability."...

CVE-2016-0033

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 does not prevent recursive compilation of XSLT transforms, which allows remote attackers to cause a denial of service performance degradation via crafted XSLT data, aka ".NET Framework Stack Overflow Denial of Service...

Cumulative update for Windows 10: February 9, 2016

None None...

The vulnerability of the Microsoft .NET Framework software platform, which allows a hacker to read arbitrary files

The vulnerability of the XML DTD parser component in the Microsoft .NET Framework is related to the lack of protection for operational data. Exploiting this vulnerability allows an attacker to remotely read arbitrary files by creating external declarations on XXE objects...

The vulnerability of the Microsoft .NET Framework software platform allows a perpetrator to inject arbitrary web or HTML code.

The vulnerability of the ASP.NET software platform, Microsoft .NET Framework, exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject any desired web or HTML code using a specially crafted variable value...

Microsoft .NET Framework Security Mechanism Bypass Vulnerability

Microsoft .NET Framework is a popular software development toolkit. A security mechanism bypass vulnerability exists in Microsoft .NET Framework versions 2.0 SP2, 3.5, and 3.5.1, which allows remote attackers to bypass the ASLR security mechanism via a crafted web site...

The vulnerability of the Microsoft .NET Framework software platform allows a perpetrator to execute arbitrary code or circumvent existing access restrictions.

The vulnerability of the Microsoft .NET Framework software platform arises due to buffer overflows. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or circumvent existing access restrictions using a specially crafted application...

The vulnerability of the Microsoft .NET Framework software allows a hacker to cause a service failure for a web resource based on ASP.NET.

The vulnerability of the Microsoft .NET Framework software platform is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure for a web resource based on ASP.NET, using a specially crafted request...

PT-2015-2030 · Microsoft · .Net Framework

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 2.0 SP2 through 4.6 Description: The issue is caused by improper object counting before performing an array copy, allowing remote attackers to execute arbitrary code or bypass Code Access Security restriction...

Microsoft .NET Framework Elevation of Privilege Vulnerability (CNVD-2015-05324)

Microsoft .NET Framework is a comprehensive and consistent programming model developed by Microsoft Corporation USA and a development platform for building Windows, Windows Store, Windows Phone, Windows Server and Microsoft Azure Windows Store, Windows Phone, Windows Server, and Microsoft Azure...

Microsoft .NET Framework Elevation of Privilege Vulnerability (CNVD-2015-05323)

Microsoft .NET Framework is a comprehensive and consistent programming model developed by Microsoft Corporation USA and a development platform for building Windows, Windows Store, Windows Phone, Windows Server and Microsoft Azure Windows Store, Windows Phone, Windows Server, and Microsoft Azure...

Stack Buffer Overflow Vulnerability in Multiple SAP Products

SAP NetWeaver is an integrated service-oriented application platform that provides a development and runtime environment for SAP applications; ABAP is an application server that runs in NetWeaver and is based on the ABAP high-level programming language; and SAP .NET Connector is a connector betwe...

Microsoft .NET Custom XML Data Processing Denial of Service Vulnerability

Microsoft .NET Framework is a system distributed by Microsoft to help developers build WEB-based applications. A security vulnerability exists in the Microsoft .NET Framework that allows remote attackers to exploit a vulnerability by submitting special data to trigger a recursion that consumes a...

Microsoft ASP.NET Information Disclosure Vulnerability

Microsoft .NET Framework is a system distributed by Microsoft to help developers build WEB-based applications. An information disclosure vulnerability exists in Microsoft ASP.NET. On systems with the customErrors configuration disabled, ASP.NET errors when processing requests for certain...

Exploit for Code Injection in Microsoft

ExploitRemotingService c 2014 James Forshaw ==================...

PT-2014-6182 · Bmc · Bmc Track-It!

Name of the Vulnerable Software and Affected Versions: BMC Track-It! version 11.3.0.355 Description: The issue allows remote attackers to upload arbitrary files, execute arbitrary code, or obtain sensitive credential and configuration information without requiring authentication on TCP port 9010...

CVE-2013-3861

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 allows remote attackers to cause a denial of service application crash or hang via crafted character sequences in JSON data, aka "JSON Parsing Vulnerability."...

CVE-2013-0073

The Windows Forms aka WinForms component in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly restrict the privileges of a callback function during object creation, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application XBAP or 2 ...

PT-2013-2055 · Microsoft · .Net Framework

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 1.0 SP3 through 4.5 Description: The issue allows remote attackers to execute arbitrary code via a crafted XAML browser application XBAP or a crafted .NET Framework application. An elevation of privilege...