https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 15:33:00 +0000 https://vulnerability.circl.lu/vuln/cve-2023-33170 <p><strong>Affected:</strong> Microsoft Visual Studio 2022 version 17.2, Microsoft Visual Studio 2022 version 17.0, Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6, Microsoft .NET 6.0, Microsoft .NET 7.0</p> <p>ASP.NET and Visual Studio Security Feature Bypass Vulnerability</p> <p><strong>Affected:</strong> Microsoft Visual Studio 2022 version 17.2, Microsoft Visual Studio 2022 version 17.0, Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6, Microsoft .NET 6.0, Microsoft .NET 7.0</p> <p>ASP.NET and Visual Studio Security Feature Bypass Vulnerability</p> https://vulnerability.circl.lu/vuln/cve-2023-33170 https://vulnerability.circl.lu/vuln/usn-6217-1 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: dotnet6, Ubuntu:22.04:LTS: dotnet7</p> <p>McKee-Harris, Matt Cotterell, and Jack Moran discovered that .NET did not properly update account lockout maximum failed attempts. An attacker could possibly use this issue to bypass the security feature and attempt to guess more passwords for an account.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: dotnet6, Ubuntu:22.04:LTS: dotnet7</p> <p>McKee-Harris, Matt Cotterell, and Jack Moran discovered that .NET did not properly update account lockout maximum failed attempts. An attacker could possibly use this issue to bypass the security feature and attempt to guess more passwords for an account.</p> https://vulnerability.circl.lu/vuln/usn-6217-1