Lucene search
K

9 matches found

Veracode
Veracode
added 2024/03/18 7:40 a.m.12 views

Improper Resource Shutdown Or Release

CoreWCF.NetFramingBase is vulnerable to Improper Resource Shutdown or Release. The vulnerability is due to a failure to close established connections after the timeout has occurred, which can result in Denial of Service. An attacker can trigger this vulnerability by either establishing a connecti...

7.5CVSS6.7AI score0.00126EPSS
Exploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2024/03/15 7:20 p.m.9 views

CoreWCF NetFraming based services can leave connections open when they should be closed

Impact If you have a NetFraming based CoreWCF service, extra system resources could be consumed by connections being left established instead of closing or aborting them. There are two scenarios when this can happen. When a client established a connection to the service and sends no data, the...

7.5CVSS7.4AI score0.00126EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2024/03/15 7:20 p.m.12 views

GHSA-32JQ-MV89-5RX7 CoreWCF NetFraming based services can leave connections open when they should be closed

Impact If you have a NetFraming based CoreWCF service, extra system resources could be consumed by connections being left established instead of closing or aborting them. There are two scenarios when this can happen. When a client established a connection to the service and sends no data, the...

7.5CVSS7.4AI score0.00126EPSS
Exploits0References4
NVD
NVD
added 2024/03/15 7:15 p.m.12 views

CVE-2024-28252

CoreWCF is a port of the service side of Windows Communication Foundation WCF to .NET Core. If you have a NetFraming based CoreWCF service, extra system resources could be consumed by connections being left established instead of closing or aborting them. There are two scenarios when this can...

7.5CVSS7.4AI score0.00126EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/03/15 7:4 p.m.9 views

CVE-2024-28252 CoreWCF NetFraming based services can leave connections open when they should be closed

CoreWCF is a port of the service side of Windows Communication Foundation WCF to .NET Core. If you have a NetFraming based CoreWCF service, extra system resources could be consumed by connections being left established instead of closing or aborting them. There are two scenarios when this can...

7.5CVSS6.6AI score0.00126EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/03/15 7:4 p.m.14 views

CVE-2024-28252 CoreWCF NetFraming based services can leave connections open when they should be closed

CoreWCF is a port of the service side of Windows Communication Foundation WCF to .NET Core. If you have a NetFraming based CoreWCF service, extra system resources could be consumed by connections being left established instead of closing or aborting them. There are two scenarios when this can...

7.5CVSS7.6AI score0.00126EPSS
Exploits0References2
Prion
Prion
added 2019/02/18 7:29 p.m.8 views

Remote code execution

SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service. This service establishes a NetTcpBinding endpoint that allows remote, unauthenticated clients to connect and call publicly exposed methods. The InvokeActionMethod method ma...

10CVSS9.7AI score0.35981EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2019/02/18 7:29 p.m.10 views

CVE-2019-8917

SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service. This service establishes a NetTcpBinding endpoint that allows remote, unauthenticated clients to connect and call publicly exposed methods. The InvokeActionMethod method ma...

10CVSS9.9AI score0.35981EPSS
Exploits0References2
Cvelist
Cvelist
added 2019/02/18 7:0 p.m.8 views

CVE-2019-8917

SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service. This service establishes a NetTcpBinding endpoint that allows remote, unauthenticated clients to connect and call publicly exposed methods. The InvokeActionMethod method ma...

9.9AI score0.35981EPSS
Exploits0References2
Rows per page
Query Builder