Page 9 of 86 results (0.010 seconds)

CVSS: 5.5EPSS: 0%CPEs: 80EXPL: 0

CVE-2019-0864

https://notcve.org/view.php?id=CVE-2019-0864

A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory, aka '.NET Framework Denial of Service Vulnerability'. Existe una vulnerabilidad de denegación de servicio cuando .NET Framework maneja incorrectamente los objetos en la saturación de memoria, también conocida como "Vulnerabilidad de denegación de servicio de .NET Framework". • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0864 •

CVSS: 7.8EPSS: 0%CPEs: 26EXPL: 0

CVE-2019-0757 – dotnet: NuGet Tampering Vulnerability

https://notcve.org/view.php?id=CVE-2019-0757

A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'. Existe una vulnerabilidad de manipulación en NuGet Package Manager para Linux y Mac que podría permitir que un atacante autenticado modifique la estructura de carpetas de un paquete de NuGet, también conocida como 'NuGet Package Manager Tampering Vulnerability'. A flaw was found in dotnet. A tampering vulnerability exists in NuGet software when executed in a Linux or Mac environment. An attacker who successfully exploits the vulnerability could run arbitrary code in the context of the current user. • https://access.redhat.com/errata/RHSA-2019:1259 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0757 https://access.redhat.com/security/cve/CVE-2019-0757 https://bugzilla.redhat.com/show_bug.cgi?id=1685475 • CWE-732: Incorrect Permission Assignment for Critical Resource •

CVSS: 9.3EPSS: 4%CPEs: 66EXPL: 0

CVE-2019-0613

https://notcve.org/view.php?id=CVE-2019-0613

A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework and Visual Studio Remote Code Execution Vulnerability'. Existe una vulnerabilidad de ejecución remota de código en el software de .NET Framework y en Visual Studio cuando el software no comprueba correctamente el marcado de origen de un archivo. Un atacante que consiguiera explotarla podría ejecutar código arbitrario en el contexto del usuario actual. Esto también se conoce como ".NET Framework and Visual Studio Remote Code Execution Vulnerability". • http://www.securityfocus.com/bid/106872 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0613 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.5EPSS: 0%CPEs: 72EXPL: 0

CVE-2019-0657 – dotnet: Domain-spoofing attack in System.Uri

https://notcve.org/view.php?id=CVE-2019-0657

A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'. Existe una vulnerabilidad en determinadas API de .Net Framework y en Visual Studio en la manera en la que analizan sintácticamente las URL. Esto también se conoce como ".NET Framework and Visual Studio Spoofing Vulnerability". • http://www.securityfocus.com/bid/106890 https://access.redhat.com/errata/RHSA-2019:0349 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0657 https://access.redhat.com/security/cve/CVE-2019-0657 https://bugzilla.redhat.com/show_bug.cgi?id=1673891 • CWE-20: Improper Input Validation •

CVSS: 7.5EPSS: 1%CPEs: 58EXPL: 0

CVE-2019-0545 – Core: NCL - SocketsHttpHandler mishandling 1xx response as a final response leads to info disclosure

https://notcve.org/view.php?id=CVE-2019-0545

An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7/4.7.1/4.7.2, .NET Core 2.1, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET Core 2.2, Microsoft .NET Framework 4.7.2. Una vulnerabilidad de divulgación de información en .NET Framework y .NET Core, la cual omite las configuraciones de CORS (Cross Origin Resource Sharing), también conocido como ".NET Framework Information Disclosure Vulnerability". Esto afecta a Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7/4.7.1/4.7.2, .NET Core 2.1, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET Core 2.2 y Microsoft .NET Framework 4.7.2. • http://www.securityfocus.com/bid/106405 https://access.redhat.com/errata/RHSA-2019:0040 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0545 https://access.redhat.com/security/cve/CVE-2019-0545 https://bugzilla.redhat.com/show_bug.cgi?id=1660632 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •