.NET 5.0 security and bugfix update

An update for .NET 5.0 is now available for Rocky Linux 8. Rocky Linux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

SUSE: Security Advisory (SUSE-SU-2021:2439-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

.NET 5.0 bugfix update

.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. Bug Fixes and Enhancements: Update .NET 5.0 to SDK 5.0.205 and Runtime 5.0.8 BZ1980412...

Cross-site Scripting (XSS) - Stored in bigprof-software/online-invoicing-system

✍️ Description There is a Stored XSS in the online invoicing system view price history which is lead by adding invoice items. 💥 TESTED VERSION https://github.com/bigprof-software/online-invoicing-system/releases/tag/v5.0 🕵️‍♂️ Proof of Concept POC Video:...

Security fix for the ALT Linux 9 package dotnet-aspnetcore-5.0 version 5.0.7-alt1

July 1, 2021 Vitaly Lipatov 5.0.7-alt1 - ASP.NET 5.0.7 - CVE-2021-31957: ASP.NET Denial of Service Vulnerability...

SUSE: Security Advisory (SUSE-SU-2021:2196-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-35959

In Plone 5.0 through 5.2.4, Editors are vulnerable to XSS in the folder contents view, if a Contributor has created a folder with a SCRIPT tag in the description field...

PYSEC-2021-110

In Plone 5.0 through 5.2.4, Editors are vulnerable to XSS in the folder contents view, if a Contributor has created a folder with a SCRIPT tag in the description field...

CVE-2021-35959

In Plone 5.0 through 5.2.4, Editors are vulnerable to XSS in the folder contents view, if a Contributor has created a folder with a SCRIPT tag in the description field...

Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 5.0.7-alt1

June 30, 2021 Vitaly Lipatov 5.0.7-alt1 - new version 5.0.7 with rpmrb script - CVE-2021-31204: .NET Core Elevation of Privilege Vulnerability - CVE-2021-31957: ASP.NET Denial of Service Vulnerability...

Security fix for the ALT Linux 9 package dotnet-bootstrap-5.0 version 5.0.7-alt1

June 30, 2021 Vitaly Lipatov 5.0.7-alt1 - new version 5.0.7 with rpmrb script - CVE-2021-31204: .NET Core Elevation of Privilege Vulnerability - CVE-2021-31957: ASP.NET Denial of Service Vulnerability...

Command execution vulnerability exists in HkCms (CNVD-2021-49114)

HKCMS is an open source content management system developed on the basis of Thinkphp 5.0 framework, using an independent grouping approach. HkCms has a command execution vulnerability that can be exploited by attackers to gain control of the server...

Command Execution Vulnerability in HKCMS (CNVD-2021-48553)

HKCMS is an open source content management system developed on the basis of Thinkphp 5.0 framework, using an independent grouping approach. HKCMS suffers from a command execution vulnerability, which can be exploited by an attacker to gain server privileges by writing arbitrary content to a file...

Command Execution Vulnerability in HkCMS

HKCMS is an open source content management system developed on the basis of Thinkphp 5.0 framework, using an independent grouping approach. HkCMS suffers from a command execution vulnerability that can be exploited by attackers to gain control of the server...

SUSE: Security Advisory (SUSE-SU-2021:2151-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 33 Update: dotnet5.0-5.0.204-1.fc33

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

RHEL 8 : .NET 5.0 (RHSA-2021:2353)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2353 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. N...

NetSetManPro 4.7.2 Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Affected Products NetSetManPro 4.7.2 other/older releases have not been tested References https://www.secuvera.de/advisories/secuvera-SA-2021-01.txt used for updates CVE-2021-34546 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34546 Summar...

SUSE: Security Advisory (SUSE-SU-2021:1927-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 8 : .NET / 5.0 (ELSA-2021-2353)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2353 advisory. 5.0.204-1.0.1 - Add support for new Oracle release 5.0.204-1 - Update to .NET SDK 5.0.204 and Runtime 5.0.7 - Resolves: RHBZ1966166 Tenable has extracted the...