Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
microsoft .net vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2008-5100
The strong name (SN) implementation in Microsoft .NET Framework 2.0.50727 relies on the digital signature Public Key Token embedded in the pathname of a DLL file instead of the digital signature of this file itself, which makes it easier for malicious users to bypass Global Assem...
Microsoft .net Framework 2.0.50727
NA
CVE-2012-0162
Microsoft .NET Framework 4 does not properly allocate buffers, which allows remote malicious users to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Buffer Allocation Vulnerability...
Microsoft .net Framework 4.0
NA
CVE-2012-0164
Microsoft .NET Framework 4 does not properly compare index values, which allows remote malicious users to cause a denial of service (application hang) via crafted requests to a Windows Presentation Foundation (WPF) application, aka ".NET Framework Index Comparison Vulnerabil...
Microsoft .net Framework 4.0
7.5
CVSSv3
CVE-2016-7270
The Data Provider for SQL Server in Microsoft .NET Framework 4.6.2 mishandles a developer-supplied key, which allows remote malicious users to bypass the Always Encrypted protection mechanism and obtain sensitive cleartext information by leveraging key guessability, aka ".NE...
Microsoft .net Framework 4.6.2
NA
CVE-2013-1337
Microsoft .NET Framework 4.5 does not properly create policy requirements for custom Windows Communication Foundation (WCF) endpoint authentication in certain situations involving passwords over HTTPS, which allows remote malicious users to bypass authentication by sending querie...
Microsoft .net Framework 4.5
7.8
CVSSv3
CVE-2022-41032
NuGet Client Elevation of Privilege Vulnerability
Microsoft .net Core 3.1
Microsoft .net 6.0.0
Microsoft Visual Studio 2022
Microsoft Visual Studio 2019
Fedoraproject Fedora 35
Fedoraproject Fedora 36
Fedoraproject Fedora 37
6.8
CVSSv3
CVE-2024-21319
Microsoft Identity Denial of service vulnerability
Microsoft .net
Microsoft Identity Model
Microsoft Visual Studio 2022
1 Github repository
7.5
CVSSv3
CVE-2023-35391
ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability
Microsoft .net
Microsoft Visual Studio 2022
Microsoft Asp.net Core
7.5
CVSSv3
CVE-2018-8409
A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1.
Microsoft .net Core
Microsoft Asp.net Core
Microsoft System.io.pipelines 4.5.0
5.7
CVSSv3
CVE-2021-41355
.NET Core and Visual Studio Information Disclosure Vulnerability
Microsoft .net 5.0
Microsoft Visual Studio 2019
Microsoft Powershell
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
privilege escalation
CVE-2024-20696
CVE-2024-29829
CVE-2024-33999
CVE-2024-35646
physical
CVE-2024-24919
CVE-2024-31030
local users
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
5
6
7
8
9
10
NEXT »