The vulnerability of the Microsoft .NET Framework software platform, Microsoft Visual Studio for software development, and Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server packages, related to errors in processing XML requests, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft .NET Framework software platform, as well as the Microsoft Visual Studio development tools, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server, is related to errors in processing XML requests. Exploiting this vulnerability allows a malicious...

dotnet: XML source markup processing remote code execution

It was discovered that .NET Core did not properly check the source markup of XML files. A remote, unauthenticated attacker could possibly exploit this flaw to execute arbitrary code by sending specially crafted requests to an application parsing certain kinds of XML files or an ASP.NET Core...

dotnet: XML source markup processing remote code execution

It was discovered that .NET Core did not properly check the source markup of XML files. A remote, unauthenticated attacker could possibly exploit this flaw to execute arbitrary code by sending specially crafted requests to an application parsing certain kinds of XML files or an ASP.NET Core...

dotnet: XML source markup processing remote code execution

It was discovered that .NET Core did not properly check the source markup of XML files. A remote, unauthenticated attacker could possibly exploit this flaw to execute arbitrary code by sending specially crafted requests to an application parsing certain kinds of XML files or an ASP.NET Core...

OSV-2020-328 UNKNOWN READ in dotnet_parse_tilde_2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16448 Crash type: UNKNOWN READ Crash state: dotnetparsetilde2 dotnetparsetilde dotnetparsecom...

dotnet: Denial of service via untrusted input

An integer overflow condition was found in dotnet and dotnet3.1's BinaryReader Read7BitEncodedInt method. This method is used by BinaryReader's ReadString method, and given a certain input, and cause a denial of service to dotnet applications using BinaryReader. The exploitation of this flaw...

dotnet: Denial of service via untrusted input

An integer overflow condition was found in dotnet and dotnet3.1's BinaryReader Read7BitEncodedInt method. This method is used by BinaryReader's ReadString method, and given a certain input, and cause a denial of service to dotnet applications using BinaryReader. The exploitation of this flaw...

dotnet3.1 security update

3.1.104-2.0.2 - Update patch to support 8.2 [email protected] 3.1.104-2.0.1 - support OL release scheme [email protected] 3.1.104-2 - Update to new release - Resolves: RHBZ1833091 3.1.104-1 - Update to .NET Core Runtime 3.1.4 and SDK 3.1.104 - Resolves: RHBZ1833091...

The vulnerability of the .NET Core software platform, related to errors in handling web requests, allows attackers to trigger a service failure.

The vulnerability of the .NET Core software platform is related to errors in handling web requests. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Important: Red Hat Security Advisory: dotnet3.1 security update

An update for dotnet3.1 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

dotnet: Denial of service via untrusted input

An integer overflow condition was found in dotnet and dotnet3.1's BinaryReader Read7BitEncodedInt method. This method is used by BinaryReader's ReadString method, and given a certain input, and cause a denial of service to dotnet applications using BinaryReader. The exploitation of this flaw...

Cross-site Scripting (XSS)

Overview bootstrap-select is a .NET bundle for bootstrap-select jQuery plugin. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the use of the data-subtext attribute, in cases where that content originates from a user-controlled input. PoC by Snyk Research js HTML ...

Denial Of Service (DoS)

dotnet is vulnerable to denial of service. An attacker is able to crash the application via malicious input...

dotnet: Denial of service via untrusted input

An integer overflow condition was found in dotnet and dotnet3.1's BinaryReader Read7BitEncodedInt method. This method is used by BinaryReader's ReadString method, and given a certain input, and cause a denial of service to dotnet applications using BinaryReader. The exploitation of this flaw...

dotnet: Denial of service via untrusted input

An integer overflow condition was found in dotnet and dotnet3.1's BinaryReader Read7BitEncodedInt method. This method is used by BinaryReader's ReadString method, and given a certain input, and cause a denial of service to dotnet applications using BinaryReader. The exploitation of this flaw...

CVE-2020-8867

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Standard 1.04.358.30. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of sessions. The issue results fr...

OPC Foundation UA .NET Standard Code Issue Vulnerability

NET Standard is the OPC Foundation's OPC Foundation set of unified architecture standards for developing OPC UA applications. A security vulnerability exists in the handling of sessions in OPC Foundation UA.NET Standard due to a lack of proper locking when performing operations on objects. An...

Exploit for Code Injection in Microsoft

CVEAssessments012020 CVE-2017-8759 Update DVR Examiner...

February 25, 2020-KB4538156 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10 Version 1809 and Windows Server 2019

None None...

Preview of Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 (KB4538158)

Preview of Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 KB4538158 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1...