CVE-2021-0603

In onCreate of ContactSelectionActivity.java, there is a possible way to get access to contacts without permission due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2021-0603

In onCreate of ContactSelectionActivity.java, there is a possible way to get access to contacts without permission due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2021-0603

In onCreate of ContactSelectionActivity.java, there is a possible way to get access to contacts without permission due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2021-0603

The CVE-2021-0603 entry describes a local elevation-of-privilege vulnerability in Android 11 affecting the ContactSelectionActivity.java onCreate path. A tapjacking/overlay scenario could allow a non-privileged app to gain access to contacts without user-permission, requiring user interaction for...

SUSE: Security Advisory (SUSE-SU-2012:0603-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 8 : .NET Core on Red Hat Enterprise Linux (CESA-2020:0130)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:0130 advisory. - dotnet: Denial of service via backpressure issue CVE-2020-0602 - dotnet: Memory Corruption in SignalR CVE-2020-0603 Note that Nessus has not tested f...

RHEL 7 : .NET Core on Red Hat Enterprise Linux (RHSA-2020:0134)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0134 advisory. .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

Security Update for Microsoft ASP.NET Core (January 2020)

The Microsoft ASP.NET Core installation on the remote host is version 2.1.x 2.1.15, 3.0.x 3.0.2, or 3.1.x 3.1.1. It is, therefore, affected by multiple vulnerabilities: - A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully...

RHEL 8 : .NET Core on Red Hat Enterprise Linux (RHSA-2020:0130)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0130 advisory. .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

Critical: Red Hat Security Advisory: .NET Core on Red Hat Enterprise Linux security and bug fix update

An update for rh-dotnet30-dotnet and rh-dotnet31-dotnet is now available for .NET Core on Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Critical: Red Hat Security Advisory: .NET Core on Red Hat Enterprise Linux security and bug fix update

An update for dotnet3.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

ASP.NET Core SDK 3.0.x < 3.0.102, 3.1.x < 3.1.101 Multiple Vulnerabilities (Jan 2020)

ASP.NET Core SDK is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you ca...

CVE-2020-0603

A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka 'ASP.NET Core Remote Code Execution Vulnerability'...

CVE-2020-0603

A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka 'ASP.NET Core Remote Code Execution Vulnerability'...

CVE-2020-0603

ASP.NET Core remote code execution (CVE-2020-0603) is described in the connected OSV entries as a vulnerability where ASP.NET Core fails to handle memory objects, enabling arbitrary code execution. The OSV BIT-ASPNET-CORE-2020-0603 entry confirms this RCE vector in ASP.NET Core. Red Hat advisory ...

CVE-2020-0603

A memory corruption flaw was found in ASP.NET core. A client can write to freed memory on the server which could result in undefined behavior. An unauthenticated, remote attacker could exploit this vulnerability to execute arbitrary code by sending specially crafted requests to an ASP.NET Core...

CVE-2019-0603

CVE-2019-0603 impacts Windows Deployment Services TFTP Server. The vulnerability stems from improper handling of objects in memory within WDSTFTP, allowing a remote attacker to craft a request that executes arbitrary code with elevated privileges. The available connected documents confirm this re...

Windows Deployment Services TFTP Server Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory. An remote attacker can exploit this, via a specially crafted request, to execute arbitrary code with elevated permissions on a target system. C Tenable Network Security,...

KLA11876 Multiple vulnerabiltiies in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A denial of servi...

KB4489884: Windows Server 2012 March 2019 Security Update

The remote Windows host is missing security update 4489884 or cumulative update 4489891. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory. An attacker who...