Page 2 of 13 results (0.005 seconds)

CVSS: 6.5EPSS: 0%CPEs: 4EXPL: 0

CVE-2024-38167 – .NET and Visual Studio Information Disclosure Vulnerability

https://notcve.org/view.php?id=CVE-2024-38167

.NET and Visual Studio Information Disclosure Vulnerability A flaw was found in the .NET platform. This issue may lead to the disclosure of sensitive information via TlsStream. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38167 https://access.redhat.com/security/cve/CVE-2024-38167 https://bugzilla.redhat.com/show_bug.cgi?id=2302428 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-319: Cleartext Transmission of Sensitive Information •

CVSS: 7.3EPSS: 0%CPEs: 24EXPL: 0

CVE-2024-38081 – .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

https://notcve.org/view.php?id=CVE-2024-38081

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38081 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •

CVSS: 5.9EPSS: 0%CPEs: 6EXPL: 0

CVE-2024-30046 – Visual Studio Denial of Service Vulnerability

https://notcve.org/view.php?id=CVE-2024-30046

Visual Studio Denial of Service Vulnerability Vulnerabilidad de denegación de servicio de Visual Studio A flaw was found in ASP.NET Core. A deadlock condition can be triggered in Http2OutputProducer.Stop(), which may lead to a denial of service. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30046 https://access.redhat.com/security/cve/CVE-2024-30046 https://bugzilla.redhat.com/show_bug.cgi?id=2279697 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CWE-833: Deadlock •

CVSS: 6.3EPSS: 0%CPEs: 7EXPL: 0

CVE-2024-30045 – .NET and Visual Studio Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2024-30045

.NET and Visual Studio Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de .NET y Visual Studio A remote code execution vulnerability exists in .NET 7.0 and .NET 8.0. A stack buffer overrun occurs in the .NET Double Parse routine. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30045 https://access.redhat.com/security/cve/CVE-2024-30045 https://bugzilla.redhat.com/show_bug.cgi?id=2279695 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-122: Heap-based Buffer Overflow •

CVSS: 7.3EPSS: 0%CPEs: 18EXPL: 0

CVE-2024-21409 – .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2024-21409

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código en .NET, .NET Framework y Visual Studio • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21409 • CWE-416: Use After Free •