Lucene search
+L

2331 matches found

OpenVAS
OpenVAS
•added 2024/03/04 12:00 a.m.•48 views

openSUSE Security Advisory (openSUSE-SU-2024:0037-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.9AI score0.00314EPSS
SaveExploits0References4
Veracode
Veracode
•added 2024/02/23 2:00 p.m.•27 views

Denial Of Service (DoS)

.NET is vulnerable to Denial Of Service Dos. The vulnerability is due to improper handling of x509 certificates, which can result in Denial of Service DoS...

7.5CVSS7.4AI score0.02707EPSS
SaveExploits0References2Affected Software15
BDU FSTEC
BDU FSTEC
•added 2024/02/16 12:00 a.m.•20 views

The vulnerability of the mbedtls_x509_set_extension function in Mbed TLS software allows a attacker to trigger a service failure.

The vulnerability of the mbedtlsx509setextension function in Mbed TLS is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.8CVSS7.3AI score0.0112EPSS
SaveExploits0References5Affected Software3
RedHat Linux
RedHat Linux
•added 2024/02/14 8:57 a.m.•9 views

dotnet: Denial of Service in X509Certificate2

A denial of service vulnerability exists in .NET applications with OpenSSL support when parsing X509 certificates. The issue arises from inadequate validation of user-supplied input in .NET. This flaw allows a remote attacker to trigger a denial of service DoS attack by providing specially crafte...

7.5CVSS7.3AI score0.02707EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/02/14 12:00 a.m.•2 views

PT-2024-41045

Name of the Vulnerable Software and Affected Versions mbedtls versions 2.28.3 through 2.28.6 Description The issue concerns a buffer overread in TLS stream cipher suites, a timing side channel in private key RSA operations, and a buffer overflow in mbedtls x509 set extension. Recommendations For...

6.1AI score
SaveExploits0References11
OSV
OSV
•added 2024/02/13 9:53 p.m.•12 views

USN-6634-1 dotnet6, dotnet7, dotnet8 vulnerabilities

Brennan Conroy discovered that .NET with SignalR did not properly handle malicious clients. An attacker could possibly use this issue to cause a denial of service. CVE-2024-21386 Bahaa Naamneh discovered that .NET with OpenSSL support did not properly parse X509 certificates. An attacker could...

7.5CVSS7.3AI score0.02707EPSS
SaveExploits0References3
Snyk
Snyk
•added 2024/02/13 7:43 p.m.•10 views

Denial of Service (DoS)

Overview Microsoft.AspNetCore.App.Runtime.linux-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Denial of Service DoS when parsing X509 certificates...

7.5CVSS7.1AI score0.02707EPSS
SaveExploits0References2
Snyk
Snyk
•added 2024/02/13 7:43 p.m.•7 views

Denial of Service (DoS)

Overview Microsoft.AspNetCore.App.Runtime.linux-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Denial of Service DoS when parsing X509 certificates...

7.5CVSS7.1AI score0.02707EPSS
SaveExploits0References2
Snyk
Snyk
•added 2024/02/13 7:43 p.m.•8 views

Denial of Service (DoS)

Overview Microsoft.AspNetCore.App.Runtime.win-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Denial of Service DoS when parsing X509 certificates...

7.5CVSS7.1AI score0.02707EPSS
SaveExploits0References2
Snyk
Snyk
•added 2024/02/13 7:43 p.m.•8 views

Denial of Service (DoS)

Overview Microsoft.AspNetCore.App.Runtime.win-x86 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Denial of Service DoS when parsing X509 certificates...

7.5CVSS7.1AI score0.02707EPSS
SaveExploits0References2
Snyk
Snyk
•added 2024/02/13 7:43 p.m.•8 views

Denial of Service (DoS)

Overview Microsoft.AspNetCore.App.Runtime.win-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Denial of Service DoS when parsing X509 certificates...

7.5CVSS7.1AI score0.02707EPSS
SaveExploits0References2
Snyk
Snyk
•added 2024/02/13 7:43 p.m.•8 views

Denial of Service (DoS)

Overview Microsoft.AspNetCore.App.Runtime.osx-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Denial of Service DoS when parsing X509 certificates...

7.5CVSS7.1AI score0.02707EPSS
SaveExploits0References2
Snyk
Snyk
•added 2024/02/13 7:43 p.m.•17 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS when parsing X509 certificates. Note: Windows systems are not vulnerable to this issue. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and...

7.5CVSS7.1AI score0.02707EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2024/02/13 6:55 p.m.•11 views

dotnet: Denial of Service in X509Certificate2

A denial of service vulnerability exists in .NET applications with OpenSSL support when parsing X509 certificates. The issue arises from inadequate validation of user-supplied input in .NET. This flaw allows a remote attacker to trigger a denial of service DoS attack by providing specially crafte...

7.5CVSS7.3AI score0.02707EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2024/02/13 6:54 p.m.•14 views

dotnet: Denial of Service in X509Certificate2

A denial of service vulnerability exists in .NET applications with OpenSSL support when parsing X509 certificates. The issue arises from inadequate validation of user-supplied input in .NET. This flaw allows a remote attacker to trigger a denial of service DoS attack by providing specially crafte...

7.5CVSS7.3AI score0.02707EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2024/02/13 6:44 p.m.•16 views

dotnet: Denial of Service in X509Certificate2

A denial of service vulnerability exists in .NET applications with OpenSSL support when parsing X509 certificates. The issue arises from inadequate validation of user-supplied input in .NET. This flaw allows a remote attacker to trigger a denial of service DoS attack by providing specially crafte...

7.5CVSS7.3AI score0.02707EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2024/02/13 6:30 p.m.•58 views

CVE-2024-21404

A denial of service vulnerability exists in .NET applications with OpenSSL support when parsing X509 certificates. The issue arises from inadequate validation of user-supplied input in .NET. This flaw allows a remote attacker to trigger a denial of service DoS attack by providing specially crafte...

7.5CVSS7.3AI score0.02707EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2024/02/13 12:00 a.m.•112 views

Security Update for Microsoft .NET Core SDK (February 2024)

The version of .NET Core SDK installed on the remote host is 6.x prior to 6.0.27, 7.x prior to 7.0.16 or 8.x prior to 8.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the February 2024 advisory: - A vulnerability exists in ASP.NET applications using SignalR where a...

7.5CVSS7.3AI score0.02707EPSS
SaveExploits0References13
OSV
OSV
•added 2024/02/08 11:06 a.m.•14 views

OESA-2024-1137 nodejs security update

Node.js is an open-source, cross-platform, JavaScript runtime environment, it executes JavaScript code outside of a browser. Security Fixes: A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include polic...

7.5CVSS8.9AI score0.03658EPSS
SaveExploits0References3
OSV
OSV
•added 2024/01/31 8:15 a.m.•17 views

UBUNTU-CVE-2024-23775

Integer Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows attackers to cause a denial of service DoS via mbedtlsx509setextension...

7.5CVSS5.8AI score0.0112EPSS
SaveExploits0References4
Rows per page
Query Builder