Поиск уязвимостей
Количество 39
Количество 39
ALT-PU-2022-1360
ALT-PU-2022-1360: package `powershell` update to version 7.2.1-alt1
ALT-PU-2022-1272
ALT-PU-2022-1272: package `powershell` update to version 7.2.1-alt1
CVE-2020-0951
<p>A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement. An attacker who successfully exploited this vulnerability could execute PowerShell commands that would be blocked by WDAC.</p> <p>To exploit the vulnerability, an attacker need administrator access on a local machine where PowerShell is running. The attacker could then connect to a PowerShell session and send commands to execute arbitrary code.</p> <p>The update addresses the vulnerability by correcting how PowerShell commands are validated when WDAC protection is enabled.</p>
CVE-2020-0951
Windows Defender Application Control Security Feature Bypass Vulnerability
ALT-PU-2022-1358
ALT-PU-2022-1358: package `dotnet-runtime-5.0` update to version 5.0.14-alt1
ALT-PU-2022-1357
ALT-PU-2022-1357: package `dotnet-bootstrap-5.0` update to version 5.0.14-alt1
ALT-PU-2022-1270
ALT-PU-2022-1270: package `dotnet-runtime-5.0` update to version 5.0.14-alt1
GHSA-72c6-539v-q92f
A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement, aka 'Windows Defender Application Control Security Feature Bypass Vulnerability'.
BDU:2020-04320
Уязвимость средства контроля приложений Управление приложениями в Защитнике Windows (Windows Defender Application Control, WDAC) средства автоматизации PowerShell Core, позволяющая нарушителю выполнить произвольный код
ALT-PU-2022-1269
ALT-PU-2022-1269: package `dotnet-bootstrap-5.0` update to version 5.0.14-alt1
RLSA-2021:3148
Important: .NET 5.0 security and bugfix update
ELSA-2021-3148
ELSA-2021-3148: .NET 5.0 security and bugfix update (IMPORTANT)
ELSA-2021-3142
ELSA-2021-3142: .NET Core 3.1 security and bugfix update (IMPORTANT)
ALT-PU-2022-1355
ALT-PU-2022-1355: package `dotnet-corefx-3.1` update to version 3.1.22-alt1
ALT-PU-2022-1354
ALT-PU-2022-1354: package `dotnet-hostfxr-3.1` update to version 3.1.22-alt1
ALT-PU-2022-1353
ALT-PU-2022-1353: package `dotnet-coreclr-3.1` update to version 3.1.22-alt1
ALT-PU-2022-1276
ALT-PU-2022-1276: package `dotnet-hostfxr-3.1` update to version 3.1.22-alt1
ALT-PU-2022-1275
ALT-PU-2022-1275: package `dotnet-corefx-3.1` update to version 3.1.22-alt1
ALT-PU-2022-1274
ALT-PU-2022-1274: package `dotnet-coreclr-3.1` update to version 3.1.22-alt1
ALT-PU-2022-1352
ALT-PU-2022-1352: package `dotnet-bootstrap-3.1` update to version 3.1.22-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2022-1360 ALT-PU-2022-1360: package `powershell` update to version 7.2.1-alt1 | CVSS3: 7.5 | больше 4 лет назад | |
| ALT-PU-2022-1272 ALT-PU-2022-1272: package `powershell` update to version 7.2.1-alt1 | CVSS3: 7.5 | почти 5 лет назад | |
 | CVE-2020-0951 <p>A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement. An attacker who successfully exploited this vulnerability could execute PowerShell commands that would be blocked by WDAC.</p> <p>To exploit the vulnerability, an attacker need administrator access on a local machine where PowerShell is running. The attacker could then connect to a PowerShell session and send commands to execute arbitrary code.</p> <p>The update addresses the vulnerability by correcting how PowerShell commands are validated when WDAC protection is enabled.</p> | CVSS3: 6.7 | 7% Низкий | около 6 лет назад |
 | CVE-2020-0951 Windows Defender Application Control Security Feature Bypass Vulnerability | CVSS3: 6.7 | 7% Низкий | около 5 лет назад |
| ALT-PU-2022-1358 ALT-PU-2022-1358: package `dotnet-runtime-5.0` update to version 5.0.14-alt1 | CVSS3: 7.5 | больше 4 лет назад | |
| ALT-PU-2022-1357 ALT-PU-2022-1357: package `dotnet-bootstrap-5.0` update to version 5.0.14-alt1 | CVSS3: 8.8 | больше 4 лет назад | |
| ALT-PU-2022-1270 ALT-PU-2022-1270: package `dotnet-runtime-5.0` update to version 5.0.14-alt1 | CVSS3: 7.5 | почти 5 лет назад | |
| GHSA-72c6-539v-q92f A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement, aka 'Windows Defender Application Control Security Feature Bypass Vulnerability'. | CVSS3: 6.7 | 7% Низкий | больше 4 лет назад |
 | BDU:2020-04320 Уязвимость средства контроля приложений Управление приложениями в Защитнике Windows (Windows Defender Application Control, WDAC) средства автоматизации PowerShell Core, позволяющая нарушителю выполнить произвольный код | CVSS3: 6.7 | 7% Низкий | около 6 лет назад |
| ALT-PU-2022-1269 ALT-PU-2022-1269: package `dotnet-bootstrap-5.0` update to version 5.0.14-alt1 | CVSS3: 8.8 | почти 5 лет назад | |
 | RLSA-2021:3148 Important: .NET 5.0 security and bugfix update | больше 5 лет назад | ||
| ELSA-2021-3148 ELSA-2021-3148: .NET 5.0 security and bugfix update (IMPORTANT) | больше 5 лет назад | ||
| ELSA-2021-3142 ELSA-2021-3142: .NET Core 3.1 security and bugfix update (IMPORTANT) | больше 5 лет назад | ||
| ALT-PU-2022-1355 ALT-PU-2022-1355: package `dotnet-corefx-3.1` update to version 3.1.22-alt1 | CVSS3: 7.5 | больше 4 лет назад | |
| ALT-PU-2022-1354 ALT-PU-2022-1354: package `dotnet-hostfxr-3.1` update to version 3.1.22-alt1 | CVSS3: 7.5 | больше 4 лет назад | |
| ALT-PU-2022-1353 ALT-PU-2022-1353: package `dotnet-coreclr-3.1` update to version 3.1.22-alt1 | CVSS3: 7.5 | больше 4 лет назад | |
| ALT-PU-2022-1276 ALT-PU-2022-1276: package `dotnet-hostfxr-3.1` update to version 3.1.22-alt1 | CVSS3: 7.5 | почти 5 лет назад | |
| ALT-PU-2022-1275 ALT-PU-2022-1275: package `dotnet-corefx-3.1` update to version 3.1.22-alt1 | CVSS3: 7.5 | почти 5 лет назад | |
| ALT-PU-2022-1274 ALT-PU-2022-1274: package `dotnet-coreclr-3.1` update to version 3.1.22-alt1 | CVSS3: 7.5 | почти 5 лет назад | |
| ALT-PU-2022-1352 ALT-PU-2022-1352: package `dotnet-bootstrap-3.1` update to version 3.1.22-alt1 | CVSS3: 8.8 | больше 4 лет назад |
Уязвимостей на страницу