10919 matches found
Microsoft .NET platforms and DoS
The vulnerabilities of Microsoft .NET software platforms and Microsoft Visual Studio development tools stem from synchronization errors when using shared resources. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions...
Security Updates for Microsoft Visual Studio Products (May 2024)
The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - Recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution. CVE-2024-32002 - Remote Code Execution while...
WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Plugin <= 1.26.4 is vulnerable to Cross Site Scripting (XSS)
Software Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Type Plugin Vulnerable versions = 1.26.4 Fixed in 1.26.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4400 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership...
Vulnerabilities fixed in Microsoft Developer Tools
Microsoft has fixed vulnerabilities in Visual Studio and .NET. A malicious party could exploit the vulnerabilities to execute arbitrary execute code with the victim's privileges, or to cause a denial-of-service attack. Successful exploitation requires the malicious party to trick the victim into...
CVE-2024-4363: Improper Neutralization of Input During Web Page Generation
The Visual Portfolio, Photo Gallery & Post Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘titletag’ parameter in all versions up to, and including, 3.3.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...
Oracle Linux 9 : .NET / 7.0 (ELSA-2024-2843)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2843 advisory. 7.0.119-1.0.1 - Add OracleLinux support Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...
Oracle Linux 9 : .NET / 8.0 (ELSA-2024-2842)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2842 advisory. 8.0.105-1.0.1 - Add support for Oracle Linux 8.0.105-1 - Update to .NET SDK 8.0.105 and Runtime 8.0.5 - Resolves: RHEL-35317 Tenable has extracted the...
CVE-2024-4363
CVE-2024-4363 affects Visual Portfolio, Photo Gallery & Post Grid (WordPress). The vulnerability is a Stored XSS via the title_tag parameter in the plugin’s code, affecting all versions up to 3.3.2. The root cause is insufficient input sanitization and output escaping, enabling authenticated atta...
Patch Tuesday - May 2024
Microsoft is addressing 61 vulnerabilities this May 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for three of the vulnerabilities published today. At time of writing, two of the vulnerabilities patched today are listed on CISA KEV. Microsoft is...
CVE-2024-30046
Visual Studio Denial of Service Vulnerability...
CVE-2024-30045
.NET and Visual Studio Remote Code Execution Vulnerability...
CVE-2024-30045
.NET and Visual Studio Remote Code Execution Vulnerability...
CVE-2024-30046
Visual Studio Denial of Service Vulnerability...
CVE-2024-30046
Visual Studio Denial of Service Vulnerability...
CVE-2024-30046
CVE-2024-30046 is a denial-of-service vulnerability in Microsoft’s .NET/ASP.NET Core stack caused by a deadlock in Microsoft.AspNetCore.Server.Kestrel.Core.dll, leading to service unavailability. Connected advisories indicate the issue affects ASP.NET Core runtimes and associated Microsoft.AspNet...
CVE-2024-30046 Visual Studio Denial of Service Vulnerability
...
CVE-2024-30046 Visual Studio Denial of Service Vulnerability
...
CVE-2024-30046
Visual Studio Denial of Service Vulnerability...