Search CVE reports
31 – 40 of 86 results
Not in release
Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.
5 affected packages
dotnet6, dotnet7, dotnet8, dotnet9, dotnet10
| Package | 16.04 LTS |
|---|---|
| dotnet6 | Not in release |
| dotnet7 | Not in release |
| dotnet8 | Not in release |
| dotnet9 | Not in release |
| dotnet10 | Not in release |
Not in release
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
5 affected packages
dotnet6, dotnet7, dotnet8, dotnet9, dotnet10
| Package | 16.04 LTS |
|---|---|
| dotnet6 | Not in release |
| dotnet7 | Not in release |
| dotnet8 | Not in release |
| dotnet9 | Not in release |
| dotnet10 | Not in release |
Not in release
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.
5 affected packages
dotnet6, dotnet7, dotnet8, dotnet9, dotnet10
| Package | 16.04 LTS |
|---|---|
| dotnet6 | Not in release |
| dotnet7 | Not in release |
| dotnet8 | Not in release |
| dotnet9 | Not in release |
| dotnet10 | Not in release |
Not in release
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
5 affected packages
dotnet8, dotnet9, dotnet10, dotnet6, dotnet7
| Package | 16.04 LTS |
|---|---|
| dotnet8 | Not in release |
| dotnet9 | Not in release |
| dotnet10 | Not in release |
| dotnet6 | Not in release |
| dotnet7 | Not in release |
Not in release
Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.
5 affected packages
dotnet8, dotnet9, dotnet10, dotnet6, dotnet7
| Package | 16.04 LTS |
|---|---|
| dotnet8 | Not in release |
| dotnet9 | Not in release |
| dotnet10 | Not in release |
| dotnet6 | Not in release |
| dotnet7 | Not in release |
Not in release
Improper authorization in .NET allows an authorized attacker to elevate privileges locally.
5 affected packages
dotnet10, dotnet6, dotnet7, dotnet8, dotnet9
| Package | 16.04 LTS |
|---|---|
| dotnet10 | Not in release |
| dotnet6 | Not in release |
| dotnet7 | Not in release |
| dotnet8 | Not in release |
| dotnet9 | Not in release |
Not in release
Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network.
5 affected packages
dotnet10, dotnet6, dotnet7, dotnet8, dotnet9
| Package | 16.04 LTS |
|---|---|
| dotnet10 | Not in release |
| dotnet6 | Not in release |
| dotnet7 | Not in release |
| dotnet8 | Not in release |
| dotnet9 | Not in release |
Not in release
Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.
5 affected packages
dotnet10, dotnet6, dotnet7, dotnet8, dotnet9
| Package | 16.04 LTS |
|---|---|
| dotnet10 | Not in release |
| dotnet6 | Not in release |
| dotnet7 | Not in release |
| dotnet8 | Not in release |
| dotnet9 | Not in release |
Not in release
Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.
5 affected packages
dotnet10, dotnet6, dotnet7, dotnet8, dotnet9
| Package | 16.04 LTS |
|---|---|
| dotnet10 | Not in release |
| dotnet6 | Not in release |
| dotnet7 | Not in release |
| dotnet8 | Not in release |
| dotnet9 | Not in release |
Not in release
A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable...
5 affected packages
dotnet10, dotnet6, dotnet7, dotnet8, dotnet9
| Package | 16.04 LTS |
|---|---|
| dotnet10 | Not in release |
| dotnet6 | Not in release |
| dotnet7 | Not in release |
| dotnet8 | Not in release |
| dotnet9 | Not in release |