K000160911: Appliance mode iControl REST vulnerability CVE-2026-24464

Security Advisory Description When running in Appliance mode, a directory traversal vulnerability exists in an undisclosed iControl REST endpoint that may allow an authenticated attacker with administrator role privileges to cross a security boundary and delete files. CVE-2026-24464 Impact In...

CVE-2023-24464

Stored-cross-site scripting vulnerability in Buffalo network devices allows an attacker with access to the web management console of the product to execute arbitrary JavaScript on a legitimate user's web browser. The affected products and versions are as follows: BS-GS2008 firmware Ver. 1.0.10.01...

CVE-2024-9748

Tungsten Automation Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that th...

CVE-2024-9748 Tungsten Automation Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability

Tungsten Automation Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that th...

Rocky Linux 8 : .NET 5.0 (RLSA-2022:0830)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:0830 advisory. - A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a one-shot decompression...

Rocky Linux 8 : .NET 6.0 (RLSA-2022:0826)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:0826 advisory. - .NET and Visual Studio Denial of Service Vulnerability CVE-2022-24464 - .NET and Visual Studio Remote Code Execution Vulnerability CVE-2022-24512 Note...

Rocky Linux 8 : .NET Core 3.1 (RLSA-2022:0827)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:0827 advisory. - A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a one-shot decompression...

SUSE CVE-2022-24464

unknown...

CVE-2023-24464

CVE-2023-24464 is a stored cross-site scripting vulnerability in Buffalo network devices (BS-GS2008/2016/2024/2048 and their “P” variants; firmware 1.0.10.01 and earlier). The underlying issue is a stored XSS in the web management console that allows an attacker with access to the management UI t...

.NET Denial of Service Vulnerability

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 5.0, and .NET CORE 3.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Microsoft is aware of a Denial of Service...

GHSA-CW98-9J8W-WXV9 .NET Denial of Service Vulnerability

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 5.0, and .NET CORE 3.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Microsoft is aware of a Denial of Service...

Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 5.0.15-alt1

April 2, 2022 Vitaly Lipatov 5.0.15-alt1 - The .NET 5.0.15 and .NET 5.0.406 SDK releases - CVE-2022-24464 : .NET Denial of Service Vulnerability - CVE-2022-24512 : .NET Remote Code Execution Vulnerability - CVE-2020-8927 : .NET Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-runtime-5.0 version 5.0.15-alt1

April 2, 2022 Vitaly Lipatov 5.0.15-alt1 - new version 5.0.15 with rpmgs script - CVE-2022-24464 : .NET Denial of Service Vulnerability - CVE-2022-24512 : .NET Remote Code Execution Vulnerability - CVE-2020-8927 : .NET Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-runtime-7.0 version 6.0.3-alt1

April 2, 2022 Vitaly Lipatov 6.0.3-alt1 - new version 6.0.3 with rpmgs script - CVE-2022-24464 : .NET Denial of Service Vulnerability - CVE-2022-24512 : .NET Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.23-alt1

April 2, 2022 Vitaly Lipatov 3.1.23-alt1 - .NET Core 3.1.23 and .NET Core SDK 3.1.417 releases - CVE-2022-24464 : .NET Denial of Service Vulnerability - CVE-2022-24512 : .NET Remote Code Execution Vulnerability - CVE-2020-8927 : .NET Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-coreclr-3.1 version 3.1.23-alt1

April 2, 2022 Vitaly Lipatov 3.1.23-alt1 - .NET Core 3.1.23 - CVE-2022-24464 : .NET Denial of Service Vulnerability - CVE-2022-24512 : .NET Remote Code Execution Vulnerability - CVE-2020-8927 : .NET Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-7.0 version 6.0.3-alt1

April 2, 2022 Vitaly Lipatov 6.0.3-alt1 - The .NET 6.0.3 and .NET SDK 6.0.103 releases - CVE-2022-24464: .NET Denial of Service Vulnerability - CVE-2022-24512: .NET Remote Code Execution Vulnerability...

Fedora: Security Advisory for dotnet3.1 (FEDORA-2022-5ecee47acb)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for dotnet6.0 (FEDORA-2022-5f97af4511)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

RHEL 7 : .NET Core 3.1 on RHEL 7 (RHSA-2022:0829)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0829 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...