Most recent entries from all

bdu:2023-06585

BIT-dotnet-2022-30184 — .NET and Visual Studio Information Disclosure Vulnerability

Affected: Bitnami: dotnet

.NET and Visual Studio Information Disclosure Vulnerability

certfr-2022-avi-558 — Une vulnérabilité a été corrigée dans Microsoft .Net. Elle permet à un attaquant de provoqu…

certfr-2022-avi-558

CLEANSTART-2024-HP98221 — .NET and Visual Studio Information Disclosure Vulnerability

Affected: CleanStart: dotnet6-build, CleanStart: dotnet6-runtime

CVE-2022-30184 affects multiple packages. . See references for individual vulnerability details.

EUVD-2026-219988

fkie_cve-2022-30184

.NET and Visual Studio Information Disclosure Vulnerability

GHSA-3885-8gqc-3wpf — Potential leak of NuGet.org API key

Affected: NuGet: NuGet.Commands, NuGet: NuGet.CommandLine, NuGet: NuGet.CommandLine.XPlat

### Description

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0 and .NET Core 3.1, NuGet (NuGet.exe, NuGet.Commands, NuGet.CommandLine, NuGet.CommandLine.XPlat version range from 3.5.0 to 6.2.0). This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

A vulnerability exists in .NET 6.0, .NET Core 3.1, and NuGet (NuGet.exe, NuGet.Commands, NuGet.CommandLine, NuGet.CommandLine.XPlat version range from 3.5.0 to 6.2.0) where a nuget.org api key could leak due to an incorrect comparison with a server url.

### Affected software

#### NuGet & NuGet Packages

- Any NuGet.exe, NuGet.Commands, NuGet.CommandLine, NuGet.CommandLine.XPlat 6.2.0 version or earlier. - Any NuGet.exe, NuGet.Commands, NuGet.CommandLine, NuGet.CommandLine.XPlat 6.0.1 version or earlier. - Any NuGet.exe, NuGet.Commands, NuGet.CommandLine, NuGet.CommandLine.XPlat 5.11.1 version or earlier. - Any NuGet.exe, NuGet.Commands, NuGet.CommandLine, NuGet.CommandLine.XPlat 5.9.1 version or earlier. - Any NuGet.exe, NuGet.Commands, NuGet.CommandLine, NuGet.CommandLine.XPlat 5.7.1 version or earlier. - Any NuGet.exe, NuGet.Commands, NuGet.CommandLine, NuGet.CommandLine.XPlat 4.9.4 version or earlier.

#### .NET SDK(s)

- Any .NET 6.0 application running on .NET 6.0.5 or earlier. - Any .NET 3.1 application running on .NET Core 3.1.25 or earlier.

### Patches

- If you're using NuGet.exe 6.2.0 or low…

gsd-2022-30184

ICSA-23-320-12 — Siemens PNI

.NET and Visual Studio Information Disclosure Vulnerability. zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference). NuGet Client Elevation of Privilege Vulnerability. .NET and Visual Studio Remote Code Execution Vulnerability .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability .NET DLL Hijacking Remote Code Execution Vulnerability .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability .NET and Visual Studio Elevation of Privilege Vulnerability .NET and Visual Studio Remote Code Execution Vulnerability .NET and Visual Studio Remote Code Execution Vulnerability .NET and Visual Studio Elevation of Privilege Vulnerability

msrc_CVE-2022-30184 — .NET and Visual Studio Information Disclosure Vulnerability

msrc_CVE-2022-30184

RHSA-2022:5046 — Red Hat Security Advisory: .NET 6.0 security and bugfix update

dotnet: NuGet Credential leak due to loss of control of third party symbol server domain

RHSA-2022:5047 — Red Hat Security Advisory: .NET 6.0 on RHEL 7 security and bugfix update

dotnet: NuGet Credential leak due to loss of control of third party symbol server domain