Lucene search
+L

181 matches found

CNVD
CNVD
added 2022/01/08 12:0 a.m.76 views

Apache Avro Resource Management Error Vulnerability

Apache Avro is a data serialization system from the Apache Foundation, Inc. A resource management error vulnerability exists in Apache Avro, which stems from the product's .net SDK component not effectively limiting the amount of allocated resources. An attacker could allocate too many resources ...

7.5CVSS3.8AI score0.0296EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/06 6:15 p.m.2 views

CVE-2021-43045

A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue affects .NET applications using Apache Avro version 1.10.2 and prior versions. Users should update to version 1.11.0 which addresses this...

7.5CVSS6.7AI score
SaveExploits0References2
CVE
CVE
added 2022/01/06 6:0 p.m.129 views

CVE-2021-43045

CVE-2021-43045: A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service. Affected are .NET applications using Apache Avro 1.10.2 and earlier. Remediation per sources is to upgrade to Avro 1.11.0. Some advisory cont...

7.5CVSS7.4AI score0.0296EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/01/06 6:0 p.m.41 views

CVE-2021-43045 Possible DOS vulnerabilities in C# Avro SDK

A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue affects .NET applications using Apache Avro version 1.10.2 and prior versions. Users should update to version 1.11.0 which addresses this...

7.8AI score0.0296EPSS
SaveExploits0References2
GitLab Advisory Database
GitLab Advisory Database
added 2022/01/06 12:0 a.m.39 views

Allocation of Resources Without Limits or Throttling in Apache Avro

A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue affects .NET applications using Apache Avro and prior versions. Users should update to which addresses this issue...

7.5CVSS5.4AI score0.0296EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/08/16 12:0 a.m.40 views

RHEL 7 : .NET Core 3.1 on RHEL 7 (RHSA-2021:3143)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3143 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

7.5CVSS6.6AI score0.03902EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2021/06/09 12:57 a.m.68 views

Important: Red Hat Security Advisory: .NET 5.0 security and bugfix update

An update for .NET 5.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

7.5CVSS6.8AI score0.05138EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2021/05/19 10:11 a.m.78 views

Important: Red Hat Security Advisory: dotnet5.0 security and bugfix update

An update for .NET 5.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

7.8CVSS7.1AI score0.01365EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/05/13 12:0 a.m.37 views

RHEL 7 : .NET 5.0 on Red Hat Enterprise Linux (RHSA-2021:1546)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1546 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. N...

7.8CVSS7.3AI score0.01365EPSS
SaveExploits0References4
ALT Linux
ALT Linux
added 2021/04/17 12:0 a.m.108 views

Security fix for the ALT Linux 9 package dotnet-bootstrap-5.0 version 5.0.5-alt1

April 17, 2021 Vitaly Lipatov 5.0.5-alt1 - .NET 5.0.5 and .NET SDK 5.0.202 - CVE-2021-26701: .NET Core Remote Code Execution Vulnerability...

7.5CVSS9.8AI score0.30315EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2021/03/10 12:0 a.m.47 views

RHEL 8 : .NET Core on RHEL 8 (RHSA-2021:0793)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0793 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. N...

9.8CVSS8.7AI score0.30315EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
added 2021/03/09 8:33 p.m.39 views

Important: .NET Core on RHEL 8 security and bugfix update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 5.0.104 and .NET Runtime 5.0.4...

7.5CVSS2.8AI score0.30315EPSS
SaveExploits0References1
ALT Linux
ALT Linux
added 2021/02/18 12:0 a.m.47 views

Security fix for the ALT Linux 9 package dotnet-bootstrap-5.0 version 5.0.3-alt1

5.0.3-alt1 built Feb. 18, 2021 Vitaly Lipatov in task 266508 Feb. 17, 2021 Vitaly Lipatov - .NET 5.0.3 and .NET SDK 5.0.103 - CVE-2021-1721: .NET Core Denial of Service Vulnerability - CVE-2021-24112: .NET 5 and .NET Core Remote Code Execution Vulnerability...

7.5CVSS8.5AI score0.0334EPSS
SaveExploits0
ALT Linux
ALT Linux
added 2021/02/17 12:0 a.m.53 views

Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 5.0.3-alt1

Feb. 17, 2021 Vitaly Lipatov 5.0.3-alt1 - .NET 5.0.3 and .NET SDK 5.0.103 - CVE-2021-1721: .NET Core Denial of Service Vulnerability - CVE-2021-24112: .NET 5 and .NET Core Remote Code Execution Vulnerability...

7.5CVSS8.5AI score0.0334EPSS
SaveExploits0
Oracle linux
Oracle linux
added 2021/02/11 12:0 a.m.40 views

dotnet5.0 security and bugfix update

5.0.103-1.0.1 - Add support for new Oracle release 5.0.103-1 - Update to .NET SDK 5.0.103 and Runtime 5.0.3 - Resolves: RHBZ1924765...

6.5CVSS1.1AI score0.0334EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2021/01/13 12:0 a.m.28 views

RHEL 7 : .NET 5.0 on Red Hat Enterprise Linux (RHSA-2021:0096)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0096 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. N...

7.5CVSS7.3AI score0.04908EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2020/03/06 9:0 p.m.163 views

SharpRDP - Remote Desktop Protocol .NET Console Application For Authenticated Command Execution

To compile open the project in Visual Studio and build for release. Two DLLs will be output to the Release directory, you do not need those because the DLLs are in the assembly. If you do not want to use the provided DLLs you will need to .NET SDK to create the AxMSTSCLib.dll DLL. To create it...

7.5AI score
SaveExploits0References3
Prion
Prion
added 2019/04/10 9:29 p.m.21 views

Information disclosure

The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio fixed in version 2010 discloses sensitive database information including credentials which can be misused by the attacker...

5CVSS9.3AI score0.06609EPSS
SaveExploits4References3Affected Software1
CVE
CVE
added 2019/04/10 8:26 p.m.94 views

CVE-2019-0285

SAP Crystal Reports for Visual Studio contains a vulnerability in the .NET SDK WebForm Viewer where the viewer discloses sensitive database information, including credentials. The issue affects the WebForm Viewer component used by the SAP Crystal Reports for Visual Studio environment and is descr...

9.8CVSS9.3AI score0.06609EPSS
SaveExploits4References3Affected Software1
Cvelist
Cvelist
added 2019/04/10 8:26 p.m.34 views

CVE-2019-0285

The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio fixed in version 2010 discloses sensitive database information including credentials which can be misused by the attacker...

9.4AI score0.06609EPSS
SaveExploits4References3
Rows per page
Query Builder