6.0 Security Vulnerabilities

CVE-2024-6048

Openfind's MailGates and MailAudit fail to properly filter user input when analyzing email attachments. An unauthenticated remote attacker can exploit this vulnerability to inject system commands and execute them on the remote...

CVE-2024-21409

.NET, .NET Framework, and Visual Studio Remote Code Execution...

CVE-2024-21404

.NET Denial of Service...

CVE-2024-21386

.NET Denial of Service...

CVE-2024-21319

Microsoft Identity Denial of service...

CVE-2024-20672

.NET Denial of Service...

CVE-2024-0057

NET, .NET Framework, and Visual Studio Security Feature Bypass...

CVE-2024-0056

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass...

CVE-2023-36558

ASP.NET Core - Security Feature Bypass...

CVE-2023-36049

.NET, .NET Framework, and Visual Studio Elevation of Privilege...

CVE-2023-36799

.NET Core and Visual Studio Denial of Service...

CVE-2023-36796

Visual Studio Remote Code Execution...

CVE-2023-36793

Visual Studio Remote Code Execution...

CVE-2023-36792

Visual Studio Remote Code Execution...

CVE-2023-36794

Visual Studio Remote Code Execution...

CVE-2023-38180

.NET and Visual Studio Denial of Service...

CVE-2023-35391

ASP.NET Core SignalR and Visual Studio Information Disclosure...

CVE-2023-38178

.NET Core and Visual Studio Denial of Service...

CVE-2023-35390

.NET and Visual Studio Remote Code Execution...

CVE-2023-33170

ASP.NET and Visual Studio Security Feature Bypass...

CVE-2023-33127

.NET and Visual Studio Elevation of Privilege...

CVE-2023-24936

.NET, .NET Framework, and Visual Studio Elevation of Privilege...

CVE-2023-24897

.NET, .NET Framework, and Visual Studio Remote Code Execution...

CVE-2023-29331

.NET, .NET Framework, and Visual Studio Denial of Service...

CVE-2023-33135

.NET and Visual Studio Elevation of Privilege...

CVE-2023-33128

.NET and Visual Studio Remote Code Execution...

CVE-2023-33126

.NET and Visual Studio Remote Code Execution...

CVE-2023-28260

.NET DLL Hijacking Remote Code Execution...

CVE-2022-48284

A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability. Successful exploitation of this vulnerability could allow attackers to access restricted...

CVE-2022-48283

A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability. Successful exploitation of this vulnerability could allow attackers to access restricted...

CVE-2023-21808

.NET and Visual Studio Remote Code Execution...

CVE-2023-21538

.NET Denial of Service...

CVE-2022-41089

.NET Framework Remote Code Execution...

CVE-2022-41032

NuGet Client Elevation of Privilege...

CVE-2013-2279

CA SiteMinder Federation (FSS) 12.5, 12.0, and r6; Federation (Standalone) 12.1 and 12.0; Agent for SharePoint 2010; and SiteMinder for Secure Proxy Server 6.0, 12.0, and 12.5 does not properly verify XML signatures for SAML statements, which allows remote attackers to spoof other users and gain...

CVE-2022-38013

.NET Core and Visual Studio Denial of Service...

CVE-2022-34716

.NET Spoofing...

CVE-2022-30184

.NET and Visual Studio Information Disclosure...

CVE-2022-29145

.NET and Visual Studio Denial of Service...

CVE-2022-29117

.NET and Visual Studio Denial of Service...

CVE-2022-23267

.NET and Visual Studio Denial of Service...

CVE-2022-24512

.NET and Visual Studio Remote Code Execution...

CVE-2022-24464

.NET and Visual Studio Denial of Service...

CVE-2022-21986

.NET Denial of Service...

CVE-2021-43877

ASP.NET Core and Visual Studio Elevation of Privilege...

CVE-2019-19229

admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allows action=download&filename= Directory...

CVE-2019-19228

Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allow attackers to bypass authentication because the password for the today account is stored in the /tmp/web_users.conf...

CVE-2019-12662

A vulnerability in Cisco NX-OS Software and Cisco IOS XE Software could allow an authenticated, local attacker with valid administrator or privilege level 15 credentials to load a virtual service image and bypass signature verification on an affected device. The vulnerability is due to improper...

CVE-2019-1968

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an NX-API system process to unexpectedly restart. The vulnerability is due to incorrect validation of the HTTP header of a request that is sent to the NX-API. An attacker could...

CVE-2018-12807

Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have an input validation bypass vulnerability. Successful exploitation could lead to unauthorized information...