Security Bulletin: Multiple vulnerabilities in microsoft.netcore.app affect IBM Robotic Process Automation.

Summary Multiple vulnerabilities in IBM microsoft.netcore.app affect IBM Robotic Process Automation. The vulnerabilities exist in BrotliSharpLib which was determined to not be required by IBM Robotic Process Automation. The offending module was removed from the product. Vulnerability Details...

Security Update for .NET Core (January 2019)

The remote Windows host has an installation of .NET Core with a version 2.1.x 2.1.7 or 2.2.x 2.2.1. It is, therefore, affected by the following vulnerabilities: - An information disclosure vulnerability exists in .NET Core. An unauthenticated, remote attacker can exploit this to bypass cross-orig...

RHEL 7 : .NET Core on Red Hat Enterprise Linux (RHSA-2018:3676)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:3676 advisory. .NET Core is a managed software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

CVE-2018-8416

creationtimestamp| type| source ---|---|--- 2018-11-14 17:39:01+00:00| seen| MISP/5bec5b59-b2b0-4506-9c63-32a40a021402...

CVE-2018-8416

A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1...

CVE-2018-8416

A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1...

CVE-2018-8416

CVE-2018-8416 is a tampering vulnerability in Microsoft .NET Core 2.1 where specially crafted files can be written due to improper input handling. The connected sources confirm the issue affects .NET Core 2.1 and describe arbitrary file/directory creation as the impact (e.g., RHSA-2018:3676 refer...