Lucene search
+L

52 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/09 12:00 a.m.•4 views

CVE-2020-28150: URL Redirection to Untrusted Site

I-Net Software Clear Reports 20.10.136 web application accepts a user-controlled input that specifies a link to an external site, and uses the user supplied data in a Redirect...

6.1CVSS5.8AI score0.00905EPSS
SaveExploits1References2
Veracode
Veracode
•added 2020/01/20 6:05 a.m.•43 views

Remote Code Execution

.NET software is vulnerable to remote code execution. Failure to validate the source markup of a file allows an attacker to execute code in the context of the application upon successful exploitation of the vulnerability. This CVE ID is different from CVE-2020-0605...

8.8CVSS8.2AI score0.17767EPSS
SaveExploits0References4Affected Software2
Tenable Nessus
Tenable Nessus
•added 2020/01/16 12:00 a.m.•70 views

Security Update for .NET Core SDK (January 2020)

The Microsoft .NET Core SDK installation on the remote host is version 2.1.x 2.1.511 or 2.1.608, 3.0.x 3.0.102, or 3.1.x 3.1.101. It is, therefore, affected by multiple vulnerabilities: - A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who...

9.3CVSS8AI score0.21007EPSS
SaveExploits0References14
NVD
NVD
•added 2020/01/14 11:15 p.m.•30 views

CVE-2020-0605

A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'...

9.3CVSS9.2AI score0.17767EPSS
SaveExploits0References1
Prion
Prion
•added 2020/01/14 11:15 p.m.•39 views

Remote code execution

A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'...

9.3CVSS8.7AI score0.17767EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2020/01/14 11:11 p.m.•54 views

CVE-2020-0606

A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'...

9.7AI score0.17188EPSS
SaveExploits0References1
CVE
CVE
•added 2020/01/14 11:11 p.m.•411 views

CVE-2020-0605

CVE-2020-0605 is a remote code execution in Microsoft .NET Framework relating to XPS/file parsing where an attacker could run code by convincing a user to open a specially crafted file. Connected docs confirm the vulnerability in .NET Framework and provide mitigation via security updates across a...

9.3CVSS8.3AI score0.17767EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2020/01/14 8:09 p.m.•43 views

CVE-2020-0605

A vulnerability related to checking the source makeup of a file has been reported in .NET software. A remote attacker can exploit this vulnerability to execute arbitrary code by tricking a user into opening a specially crafted file...

9.3CVSS8.2AI score0.17767EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2020/01/14 8:09 p.m.•50 views

CVE-2020-0606

A vulnerability related to checking the source makeup of a file has been reported in .NET software. A remote attacker can exploit this vulnerability to execute arbitrary code by tricking a user into opening a specially crafted file...

9.3CVSS8.2AI score0.17188EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2020/01/14 12:00 a.m.•124 views

CVE-2020-0605

A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka ‘.NET Framework Remote Code Execution Vulnerability’...

9.3CVSS8.5AI score0.17767EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2020/01/14 12:00 a.m.•94 views

KB4534271: Windows 10 Version 1607 and Windows Server 2016 January 2020 Security Update

The remote Windows host is missing security update 4534271. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Windows Remote Desktop Gateway RD Gateway when an unauthenticated attacker connects to the target system using RDP and sends...

10CVSS7.9AI score0.99222EPSS
SaveExploits37References36
Cvelist
Cvelist
•added 2019/07/29 2:09 p.m.•51 views

CVE-2019-1113

A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'...

8.4AI score0.09996EPSS
SaveExploits0References1
CVE
CVE
•added 2019/07/29 2:09 p.m.•239 views

CVE-2019-1113

CVE-2019-1113 is a remote code execution vulnerability in .NET software where the product fails to check the source markup of a file. The root cause is the failure to validate the source markup, which could allow an attacker to run arbitrary code in the context of the current user. The vulnerabil...

8.8CVSS8.3AI score0.09996EPSS
SaveExploits0References1Affected Software1
Microsoft CVE
Microsoft CVE
•added 2019/07/09 7:00 a.m.•48 views

.NET Framework Remote Code Execution Vulnerability

A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative us...

8.8CVSS3AI score0.09996EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2019/07/09 12:00 a.m.•41 views

KB4507455: Windows 10 Version 1709 July 2019 Security Update (SWAPGS)

The remote Windows host is missing security update 4507455. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary co...

9.3CVSS7.7AI score0.70966EPSS
SaveExploits18References51
Tenable Nessus
Tenable Nessus
•added 2019/07/09 12:00 a.m.•66 views

KB4507469: Windows 10 Version 1809 and Windows Server 2019 July 2019 Security Update (SWAPGS)

The remote Windows host is missing security update 4507469. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file. An attacker who successfully exploited the vulnerabili...

9.8CVSS7.8AI score0.70966EPSS
SaveExploits18References55
Tenable Nessus
Tenable Nessus
•added 2019/07/09 12:00 a.m.•70 views

KB4507461: Windows Server 2008 July 2019 Security Update (SWAPGS)

The remote Windows host is missing security update 4507461 or cumulative update 4507452. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an authenticated attacker abuses...

9.3CVSS7.8AI score0.70966EPSS
SaveExploits11References29
Tenable Nessus
Tenable Nessus
•added 2019/07/09 12:00 a.m.•66 views

KB4507464: Windows Server 2012 July 2019 Security Update (SWAPGS)

The remote Windows host is missing security update 4507464 or cumulative update 4507462. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file. An attacker who...

9.8CVSS7.8AI score0.70966EPSS
SaveExploits8References29
NVD
NVD
•added 2018/07/11 12:29 a.m.•28 views

CVE-2018-8260

A Remote Code Execution vulnerability exists in .NET software when the software fails to check the source markup of a file, aka ".NET Framework Remote Code Execution Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 4.7.2...

8.8CVSS8.8AI score0.15525EPSS
SaveExploits0References3
Prion
Prion
•added 2018/07/11 12:29 a.m.•33 views

Remote code execution

A Remote Code Execution vulnerability exists in .NET software when the software fails to check the source markup of a file, aka ".NET Framework Remote Code Execution Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 4.7.2...

6.8CVSS8.6AI score0.15525EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder