CVE-2022-34716

CVE-2022-34716 is a .NET information-disclosure vulnerability caused by improper XML signature verification in System.Security.Cryptography.Xml.SignedXml (XML external entity injection). It can allow a remote attacker to obtain sensitive information. Affected: .NET Core 3.1 and .NET 6 deployments...

CVE-2021-41355

CVE-2021-41355 is discussed across connected advisories, with concrete detail from MiracleLinux AXSA-2021-2473:12: dotnet5.0-5.0.208-1.el8.ML.1 is affected and the vulnerability is that System.DirectoryServices.Protocols.LdapConnection can transmit credentials in plaintext if the TLS handshake fa...

CVE-2021-43896

CVE-2021-43896 corresponds to Microsoft PowerShell Spoofing Vulnerability. Multiple connected sources confirm this as a PowerShell spoofing issue affecting PowerShell products; affected component is PowerShell, with confirmed remediation via upgraded packages (for example, Mariner entries note fi...