Registros CVE publicados para Microsoft PowerShell 7.5, los más recientes primero. Siga el producto para recibir un correo con cada nueva.
Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.
Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.
Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.
Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.
Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network.
Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.
Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.
Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.
.NET Remote Code Execution Vulnerability
.NET and Visual Studio Remote Code Execution Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
Nuestro sensor honeypot gratuito y de código abierto espera en puertos que su servidor no usa y reporta a una lista compartida los escáneres y atacantes que se conectan.
