Lucene search
K

1392 matches found

Github Security Blog
Github Security Blog
added 2022/05/02 3:13 a.m.56 views

Apache XML Security For Java vulnerable to authentication bypass by HMAC truncation

The design of the W3C XML Signature Syntax and Processing XMLDsig recommendation, as implemented in multiple products. The Apache XML Security Java is affected by the vulnerability published in US-Cert VU 466161. See: http://www.kb.cert.org/vuls/id/466161 for more information. This bug can allow ...

5CVSS0.5AI score0.06348EPSS
Exploits0References29Affected Software1
OpenVAS
OpenVAS
added 2022/04/13 12:0 a.m.22 views

Microsoft .NET Framework DoS Vulnerability (KB5012118)

This host is missing an important security update according to Microsoft KB5012118 Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

7.5CVSS7.5AI score0.03186EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2022/04/13 12:0 a.m.17 views

Microsoft .NET Framework DoS Vulnerability (KB5012120)

This host is missing an important security update according to Microsoft KB5012120 Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

7.5CVSS7.5AI score0.03186EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2022/04/13 12:0 a.m.23 views

Microsoft .NET Framework DoS Vulnerability (KB5012329)

This host is missing an important security update according to Microsoft KB5012329 Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

7.5CVSS7.5AI score0.03186EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2022/04/13 12:0 a.m.21 views

Microsoft .NET Framework DoS Vulnerability (KB5012328)

This host is missing an important security update according to Microsoft KB5012328 Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

7.5CVSS7.5AI score0.03186EPSS
Exploits0References1
Microsoft KB
Microsoft KB
added 2022/04/12 8:0 a.m.43 views

Security Only Update for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB5012325)

Security Only Update for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 KB5012325 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft .NET Framework 4.6.2...

7.5CVSS7.6AI score0.03186EPSS
Exploits0
Microsoft KB
Microsoft KB
added 2022/04/12 8:0 a.m.69 views

Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Windows Server 2008 R2 SP1 (KB5012329)

Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Windows Server 2008 R2 SP1 KB5012329 Applies to: Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1...

7.5CVSS7.7AI score0.03186EPSS
Exploits0
Microsoft KB
Microsoft KB
added 2022/04/12 8:0 a.m.356 views

April 12, 2022—KB5012639 (Security-only update)

April 12, 2022—KB5012639 Security-only update Summary Learn more about this security update, including improvements and fixes, any known issues, and how to get the update. IMPORTANT Windows 8.1 and Windows Server 2012 R2 have reached the end of mainstream support and are now in extended support...

10CVSS7.8AI score0.91811EPSS
Exploits19
Microsoft KB
Microsoft KB
added 2022/04/12 8:0 a.m.98 views

Security Only Update for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Windows Server 2008 R2 SP1 (KB5012324)

Security Only Update for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Windows Server 2008 R2 SP1 KB5012324 Applies to: Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsof...

7.5CVSS7.6AI score0.03186EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2022/03/09 12:0 a.m.54 views

Security Updates for Microsoft .NET core (March 2022)

The Microsoft .NET core installations on the remote host are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application services...

7.5CVSS7.7AI score0.03243EPSS
Exploits0References10
Zero Day Initiative
Zero Day Initiative
added 2022/03/01 12:0 a.m.23 views

(0Day) Microsoft .NET Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft .NET. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

6.1CVSS4.4AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2022/02/10 12:0 a.m.59 views

Security Update for .NET Core (February 2022) (macOS)

The Microsoft .NET core installation on the remote macOS host is version 5.0 prior to 5.0.14 or version 6.0 prior to 6.0.2. It is, therefore, affected by a denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application service...

7.5CVSS7.8AI score0.03481EPSS
Exploits0References5
Microsoft KB
Microsoft KB
added 2022/02/08 8:0 a.m.156 views

February 8, 2022—KB5010419 (Monthly Rollup)

February 8, 2022—KB5010419 Monthly Rollup Summary Learn more about this security update, including improvements and fixes, any known issues, and how to get the update. IMPORTANT Windows 8.1 and Windows Server 2012 R2 have reached the end of mainstream support and are now in extended support...

7.8CVSS7.6AI score0.43618EPSS
Exploits4
OpenVAS
OpenVAS
added 2022/01/12 12:0 a.m.18 views

Microsoft .NET Framework DoS Vulnerability (KB5008877)

This host is missing an important security update according to Microsoft KB5008877 Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

7.5CVSS7.5AI score0.03052EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2022/01/12 12:0 a.m.27 views

Microsoft .NET Framework DoS Vulnerability (KB5008879)

This host is missing an important security update according to Microsoft KB5008879 Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

7.5CVSS7.5AI score0.03052EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2022/01/12 12:0 a.m.23 views

Microsoft .NET Framework DoS Vulnerability (KB5009721)

This host is missing an important security update according to Microsoft KB5009721 Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

7.5CVSS7.5AI score0.03052EPSS
Exploits0References1
Microsoft KB
Microsoft KB
added 2022/01/11 8:0 a.m.66 views

January 11, 2022—KB5009619 (Security-only update)

January 11, 2022—KB5009619 Security-only update Caution: If you intend to install this update on a domain controller DC, we highly recommend that you install the February 8, 2022 security update instead. The February security update addresses a known issue that might cause some versions of Window...

9.3CVSS7.3AI score0.06793EPSS
Exploits3
Microsoft KB
Microsoft KB
added 2022/01/11 8:0 a.m.179 views

Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 (KB5009721)

Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 KB5009721 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1...

7.5CVSS7.7AI score0.03052EPSS
Exploits0
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:0 a.m.27 views

Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability

Microsoft .NET Framework, Microsoft SharePoint, and Visual Studio contain a remote code execution vulnerability when the software fails to check the source markup of XML file input. Successful exploitation allows an attacker to execute code in the context of the process responsible for...

7.8CVSS8.1AI score0.94243EPSS
In wildExploits10
NVD
NVD
added 2021/06/30 3:15 p.m.21 views

CVE-2021-35971

Veeam Backup and Replication 10 before 10.0.1.4854 P20210609 and 11 before 11.0.0.837 P20210507 mishandles deserialization during Microsoft .NET remoting...

9.8CVSS0.01239EPSS
Exploits0References2
Rows per page
Query Builder