security .net information vulnerabilities and exploits

(subscribe to this query)

NA

The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2, allows remote malicious users to obtain sensitive information from process memory via a crafted OpenType font on a web site, aka "OpenType Font Parsing Vulnera...

Microsoft .net Framework 3.5.1 Microsoft .net Framework 4.0 Microsoft .net Framework 4.5.2 Microsoft .net Framework 3.0 Microsoft .net Framework 3.5 Microsoft .net Framework 4.5 Microsoft .net Framework 4.5.1

1 Article

NA

Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service (out-of-bounds read and snmpd crash) via an SNMP GET request for an entry not in the extension table.

Net-snmp Net-snmp 5.7.1

6.5

CVSSv3

A vulnerability in the web-based management interface of the Cisco Smart Net Total Care (SNTC) Software Collector Appliance 3.11 could allow an authenticated, remote malicious user to perform a read-only, blind SQL injection attack, which could allow the malicious user to comprom...

Cisco Smart Net Total Care Collector Appliance 3.11

7.5

CVSSv3

A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981.

Microsoft .net Core 2.1 Microsoft .net Core 2.2 Microsoft .net Core 1.0 Microsoft .net Core 1.1 Microsoft .net Framework 3.0 Microsoft .net Framework 2.0 Microsoft .net Framework 3.5 Microsoft .net Framework 3.5.1 Microsoft .net Framework 4.5.2 Microsoft .net Framework 4.6 Microsoft .net Framework 4.6.2 Microsoft .net Framework 4.7.2 Microsoft .net Framework 4.7 Microsoft .net Framework 4.7.1 Microsoft .net Framework 4.6.1 Microsoft .net Framework 4.8

1 Github repository1 Article

7.5

CVSSv3

A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0980.

Microsoft .net Core 2.2 Microsoft .net Core 1.0 Microsoft .net Core 1.1 Microsoft .net Core 2.1 Microsoft .net Framework 2.0 Microsoft .net Framework 3.0 Microsoft .net Framework 3.5 Microsoft .net Framework 3.5.1 Microsoft .net Framework 4.5.2 Microsoft .net Framework 4.6 Microsoft .net Framework 4.6.2 Microsoft .net Framework 4.7.2 Microsoft .net Framework 4.7 Microsoft .net Framework 4.7.1 Microsoft .net Framework 4.6.1 Microsoft .net Framework 4.8

1 Github repository1 Article

8.8

CVSSv3

A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Ex...

Microsoft .net Framework 3.0 Microsoft .net Framework 3.5 Microsoft .net Framework 4.6.2 Microsoft .net Framework 4.7 Microsoft .net Framework 4.7.1 Microsoft .net Framework 4.7.2 Microsoft .net Framework 4.8 Microsoft .net Framework 3.5.1 Microsoft .net Framework 4.5.2 Microsoft .net Framework 4.6 Microsoft .net Framework 4.6.1 Microsoft .net Core 1.0 Microsoft .net Core 3.0 Microsoft .net Core 3.1

2 Articles

7.8

CVSSv3

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

Microsoft .net Framework 4.8 Microsoft .net Framework 4.6.2 Microsoft .net Framework 4.7 Microsoft .net Framework 4.7.1 Microsoft .net Framework 4.7.2 Microsoft .net Framework 3.5.1 Microsoft .net Framework 3.5 Microsoft .net Framework 4.8.1 Microsoft .net Framework 3.0 Microsoft .net Framework 2.0 Microsoft .net 6.0.0 Microsoft .net 7.0.0 Microsoft Visual Studio 2022

5.5

CVSSv3

.NET and Visual Studio Information Disclosure Vulnerability

Microsoft Visual Studio 2022 Microsoft .net Core 3.1 Microsoft Visual Studio 2019 8.10 Microsoft .net 6.0.0 Microsoft Visual Studio 2019 Microsoft Visual Studio 2022 Microsoft Nuget Fedoraproject Fedora 35 Fedoraproject Fedora 36

NA

Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote malicious users to bypass Internet zone restrictions and execute arbitrary code by instantiating danger...

Microsoft Visual Studio .net 2005

1 EDB exploit1 Article

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook