dotnet: ASP.NET Core Client Disconnect Denial of Service

A flaw was found in dotnet. The way client disconnects are handled can allow a remote, unauthenticated attacker to exploit this vulnerability to cause a denial of service against an ASP.NET Core application. The highest threat from this vulnerability is to system availability...

dotnet: ASP.NET Core Client Disconnect Denial of Service

A flaw was found in dotnet. The way client disconnects are handled can allow a remote, unauthenticated attacker to exploit this vulnerability to cause a denial of service against an ASP.NET Core application. The highest threat from this vulnerability is to system availability...

CVE-2021-31957

A flaw was found in dotnet. The way client disconnects are handled can allow a remote, unauthenticated attacker to exploit this vulnerability to cause a denial of service against an ASP.NET Core application. The highest threat from this vulnerability is to system availability...

Vulnerabilities fixed in Microsoft .NET Core and Visual Studio

Microsoft has fixed vulnerabilities in .NET Core, Visual Studio and Visual Studio Code. An unauthenticated malicious person at remote user could potentially exploit it to cause a denial-of-service. The vulnerability with attribute CVE-2021-31938 could potentially be exploited by a local malicious...

Microsoft ASP.NET Core 输入验证错误漏洞

Microsoft ASP.NET Core is a framework of cross-platform open source framework from Microsoft. The framework is used to build cloud-based applications such as Web applications, Internet of Things applications, and mobile backends. An input validation error vulnerability exists in Microsoft ASP.NET...

June 8, 2021-KB5003542 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server, version 2016

None None...

June 8, 2021-KB4601554 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 2004, Windows Server, version 2004, Windows 10, version 20H2, Windows Server, version 20H2, and Windows Server 21H1

None None...

Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB5004230)

Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 KB5004230 Applies to:Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft .NET Framework 4.6.2...

PowerShell-Suite

This repository is an offensive tool for Windows UAC User Account Control bypass. It provides a framework to perform UAC bypasses based on auto-elevating IFileOperation COM object method calls. The tool is written in C and uses the .NET framework. The tool supports several methods for UAC bypass,...

CentOS 8 : dotnet5.0 (CESA-2021:2036)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2036 advisory. - dotnet: .NET Core single-file application privilege escalation CVE-2021-31204 Note that Nessus has not tested for this issue but has instead relied only on th...

CentOS 8 : dotnet3.1 (CESA-2021:2037)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2037 advisory. - dotnet: .NET Core single-file application privilege escalation CVE-2021-31204 Note that Nessus has not tested for this issue but has instead relied only on th...

[ASA-202105-21] dotnet-runtime: privilege escalation

Arch Linux Security Advisory ASA-202105-21 ========================================== Severity: Medium Date : 2021-05-25 CVE-ID : CVE-2021-31204 Package : dotnet-runtime Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-1944 Summary ======= The package dotnet-runti...

[ASA-202105-20] dotnet-sdk: privilege escalation

Arch Linux Security Advisory ASA-202105-20 ========================================== Severity: Medium Date : 2021-05-25 CVE-ID : CVE-2021-31204 Package : dotnet-sdk Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-1944 Summary ======= The package dotnet-sdk befor...

[ASA-202105-22] dotnet-runtime-3.1: privilege escalation

Arch Linux Security Advisory ASA-202105-22 ========================================== Severity: Medium Date : 2021-05-25 CVE-ID : CVE-2021-31204 Package : dotnet-runtime-3.1 Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-1945 Summary ======= The package...

[ASA-202105-23] dotnet-sdk-3.1: privilege escalation

Arch Linux Security Advisory ASA-202105-23 ========================================== Severity: Medium Date : 2021-05-25 CVE-ID : CVE-2021-31204 Package : dotnet-sdk-3.1 Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-1945 Summary ======= The package dotnet-sdk-3...

The vulnerability of the Microsoft .NET Framework software platform and the Microsoft Visual Studio development tools is related to deficiencies in access control, allowing attackers to enhance their privileges.

The vulnerability of the Microsoft .NET Framework software platform and the Microsoft Visual Studio development tools is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2021-27434

Products with Unified Automation .NET based OPC UA Client/Server SDK Bundle: Versions V3.0.7 and prior .NET 4.5, 4.0, and 3.5 Framework versions only are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow...

UBUNTU-CVE-2020-15522

Bouncy Castle BC Java before 1.66, BC C .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing information for the generation of multip...

dotnet: .NET Core single-file application privilege escalation

A flaw was found in dotnet. A .NET Core single-file application running with elevated permissions could allow an attacker to gain elevated privileges. The highest threat to this vulnerability is to confidentiality, integrity, as well as system availability...

Important: Red Hat Security Advisory: dotnet5.0 security and bugfix update

An update for .NET 5.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...