Net
Products
3- 3 CVEs
- 1 CVE
- 1 CVE
Recent CVEs
5| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-45490 | Hig | 0.51 | 7.8 | — | Jun 9, 2026 | Improper authorization in .NET allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-35433 | Hig | 0.47 | 7.3 | 0.00 | May 12, 2026 | Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. | ||
| CVE-2026-45491 | Med | 0.40 | 6.2 | — | Jun 9, 2026 | Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally. | ||
| CVE-2026-47242 | 0.00 | — | — | Jun 9, 2026 | ### Summary Two `Net::IMAP` commands, `#id` and `#enable`, do not validate their arguments. Arguments to either command could be used by an attacker to inject arbitrary IMAP commands. Please note that passing untrusted inputs to these commands is usually inappropriate and… | |||
| CVE-2024-58036 | 0.00 | — | 0.00 | Apr 5, 2025 | Net::Dropbox::API 1.9 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Net::Dropbox::API uses the Data::Random library which specifically states that it is "Useful… |
- risk 0.51cvss 7.8epss —
Improper authorization in .NET allows an authorized attacker to elevate privileges locally.
- risk 0.47cvss 7.3epss 0.00
Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.
- risk 0.40cvss 6.2epss —
Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.
- CVE-2026-47242Jun 9, 2026risk 0.00cvss —epss —
### Summary Two `Net::IMAP` commands, `#id` and `#enable`, do not validate their arguments. Arguments to either command could be used by an attacker to inject arbitrary IMAP commands. Please note that passing untrusted inputs to these commands is usually inappropriate and…
- CVE-2024-58036Apr 5, 2025risk 0.00cvss —epss 0.00
Net::Dropbox::API 1.9 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Net::Dropbox::API uses the Data::Random library which specifically states that it is "Useful…