Net\

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.

Improper authorization in .NET allows an authorized attacker to elevate privileges locally.

A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC STEP 7 V16 (All versions), SIMATIC STEP 7 V17 (All versions), SIMATIC STEP 7 V18 (All versions < V18 Update 2). Affected applications do not properly restrict the .NET BinaryFormatter when…

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.

The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.

Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.

Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.

Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, when Net::IMAP#id is called with a hash argument, although the ID field value strings are correctly quoted (escaping quoted specials), they were not validated to…