https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 19:57:43 +0000 https://vulnerability.circl.lu/vuln/cve-2023-36049 <p><strong>Affected:</strong> Microsoft Visual Studio 2022 version 17.2, Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.7, Microsoft Visual Studio 2022 version 17.6, Microsoft .NET 8.0, Microsoft .NET 6.0, Microsoft .NET 7.0, Microsoft .NET Framework 3.5 AND 4.8.1, Microsoft .NET Framework 4.8, Microsoft .NET Framework 3.5 AND 4.8 and 9 more</p> <p>.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability</p> <p><strong>Affected:</strong> Microsoft Visual Studio 2022 version 17.2, Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.7, Microsoft Visual Studio 2022 version 17.6, Microsoft .NET 8.0, Microsoft .NET 6.0, Microsoft .NET 7.0, Microsoft .NET Framework 3.5 AND 4.8.1, Microsoft .NET Framework 4.8, Microsoft .NET Framework 3.5 AND 4.8 and 9 more</p> <p>.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability</p> https://vulnerability.circl.lu/vuln/cve-2023-36049 https://vulnerability.circl.lu/vuln/usn-6480-1 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: dotnet6, Ubuntu:22.04:LTS: dotnet7</p> <p>Barry Dorrans discovered that .NET did not properly implement certain security features for Blazor server forms. An attacker could possibly use this issue to bypass validation, which could trigger unintended actions. (CVE-2023-36558)</p> <p>Piotr Bazydlo discovered that .NET did not properly handle untrusted URIs provided to System.Net.WebRequest.Create. An attacker could possibly use this issue to inject arbitrary commands to backend FTP servers. (CVE-2023-36049)</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: dotnet6, Ubuntu:22.04:LTS: dotnet7</p> <p>Barry Dorrans discovered that .NET did not properly implement certain security features for Blazor server forms. An attacker could possibly use this issue to bypass validation, which could trigger unintended actions. (CVE-2023-36558)</p> <p>Piotr Bazydlo discovered that .NET did not properly handle untrusted URIs provided to System.Net.WebRequest.Create. An attacker could possibly use this issue to inject arbitrary commands to backend FTP servers. (CVE-2023-36049)</p> https://vulnerability.circl.lu/vuln/usn-6480-1