[SECURITY] Fedora 32 Update: dotnet5.0-5.0.203-1.fc32

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

RHEL 7 : .NET 5.0 on Red Hat Enterprise Linux (RHSA-2021:1546)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1546 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. N...

Security Bulletin: Multiple vulnerabilities in IBM Jazz Team Server affect IBM Rational products based on IBM Jazz technology

Summary Multiple vulnerabilities in the IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management CLM, Rational DOORS Next Generation RDNG, Rational Engineering Lifecycle Manager RELM, Rational Team Concert RTC, Rational Quality Manager RQM, Rational...

Security Bulletin: Multiple vulnerabilities in WebSphere Application Server affect IBM Rational products based on IBM Jazz technology

Summary Multiple vulnerabilities in WebSphere Application Server bundled with IBM Jazz Team Server based Applications affect the following products: Collaborative Lifecycle Management CLM, Rational DOORS Next Generation RDNG, Rational Engineering Lifecycle Manager RELM, Rational Team Concert RTC,...

Security Bulletin: Cross-site scripting vulnerability affects IBM® Rational® Team Concert

Summary IBM Team Concert RTC is vulnerable to cross-site scripting vulnerability. Vulnerability Details CVEID: CVE-2018-1766 DESCRIPTION: IBM Team Concert RTC is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the...

Weak Password Vulnerability in HOMS 5.0 Monitoring Center

Homs5.0 monitoring center is a monitoring system platform for high-end system applications developed on the basis of years of monitoring software system platform development accumulation launched by Beijing Shuo Ren Times Technology Co. HOMS5.0 monitoring center has a weak password vulnerability,...

Realtek rtl8723de code issue vulnerability

Realtek rtl8723de is an interface controller from Realtek China. It is 802.11bgn 2.4G monolithic, integrated wireless LAN and network PCIe interface controller with integrated Bluetooth 5.0 USB interface controller. rtl8723de BLE Stack version 4.1 and prior versions have a code issue vulnerabilit...

GHSA-GHHP-997W-QR28 .NET Core Remote Code Execution Vulnerability

.NET Core Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24112. Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 5.0, .NET Core 3.1, and .NET Core 2.1. This advisory also provides guidance on what...

.NET Core Remote Code Execution Vulnerability

.NET Core Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24112. Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 5.0, .NET Core 3.1, and .NET Core 2.1. This advisory also provides guidance on what...

GHSA-49R2-73M6-PP8F Directory traversal in development mode handler in Vaadin 14 and 15-17

Improper URL validation in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.4.1 Vaadin 14.0.0 through 14.4.2, and 3.0 prior to 5.0 Vaadin 15 prior to 18 allows attacker to request arbitrary files stored outside of intended frontend resources folder. -...

Security fix for the ALT Linux 9 package dotnet-bootstrap-5.0 version 5.0.5-alt1

April 17, 2021 Vitaly Lipatov 5.0.5-alt1 - .NET 5.0.5 and .NET SDK 5.0.202 - CVE-2021-26701: .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 9 package dotnet-aspnetcore-5.0 version 5.0.5-alt1

April 17, 2021 Vitaly Lipatov 5.0.5-alt1 - .NET 5.0.5 and .NET SDK 5.0.202 - CVE-2021-26701: .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 9 package dotnet-runtime-5.0 version 5.0.5-alt1

April 17, 2021 Vitaly Lipatov 5.0.5-alt1 - .NET 5.0.5 - CVE-2021-26701: .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 5.0.5-alt1

April 17, 2021 Vitaly Lipatov 5.0.5-alt1 - .NET 5.0.5 and .NET SDK 5.0.202 - CVE-2021-26701: .NET Core Remote Code Execution Vulnerability...

Cross site scripting

A stored XSS vulnerability exists in Web-School ERP V 5.0 via Add Events in the event name and description fields. An attack can inject a JavaScript code that will be stored in the page. If any visitor sees the events, then the payload will be executed...

Cross site scripting

A blind XSS vulnerability exists in Web-School ERP V 5.0 via Add Events in event name and description fields. An attacker can inject a JavaScript code that will be stored in the page. If any visitor sees the event, then the payload will be executed and sends the victim's information to the attack...

CVE-2021-30111

A stored XSS vulnerability exists in Web-School ERP V 5.0 via Add Events in the event name and description fields. An attack can inject a JavaScript code that will be stored in the page. If any visitor sees the events, then the payload will be executed...

CVE-2021-30114

CVE-2021-30114 affects Web-School ERP v5.0. The CSRF vulnerability allows an attacker to induce a voucher payment request via the path module/accounting/voucher/create because the application fails to validate the CSRF token on a POST using admin privileges. Documents consistently describe the is...

Web-School ERP 跨站脚本漏洞

Web-School ERP is a school management software for schools and educational organizations. A stored cross-site scripting vulnerability exists in the Activity Name and Description fields in Web-School ERP version 5.0. An attacker can exploit the vulnerability to inject and execute JavaScript code...

Cross site scripting

Cross-Site scripting vulnerability in Micro Focus Access Manager product, affects all version prior to version 5.0. The vulnerability could cause configuration destruction...