https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:59:25.128462+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:0805 ALSA-2024:0805 — Important: dotnet7.0 security update 2026-10-03T16:59:25.534202+00:00

Affected: AlmaLinux:9: aspnetcore-runtime-7.0, AlmaLinux:9: aspnetcore-targeting-pack-7.0, AlmaLinux:9: dotnet-apphost-pack-7.0, AlmaLinux:9: dotnet-hostfxr-7.0, AlmaLinux:9: dotnet-runtime-7.0, AlmaLinux:9: dotnet-sdk-7.0, AlmaLinux:9: dotnet-sdk-7.0-source-built-artifacts, AlmaLinux:9: dotnet-targeting-pack-7.0, AlmaLinux:9: dotnet-templates-7.0

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.116 and .NET Runtime 7.0.16.

Security Fix(es):

* dotnet: Denial of Service in SignalR server (CVE-2024-21386) * dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-01702 bdu:2024-01702 2026-10-03T16:59:25.534287+00:00 bdu:2024-01702 https://cve.radiocsirt.org/vuln/bell-cve-2024-21404 BELL-CVE-2024-21404 2026-10-03T16:59:25.534305+00:00

Affected: Alpaquita:stream: dotnet6-build, Alpaquita:stream: dotnet6-runtime

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0129 certfr-2024-avi-0129 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Microsoft .Net</span>. Elles permettent à un at… 2026-10-03T16:59:25.534326+00:00 certfr-2024-avi-0129 https://cve.radiocsirt.org/vuln/cleanstart-2025-mp76988 CLEANSTART-2025-MP76988 — .NET Denial of Service Vulnerability 2026-10-03T16:59:25.534343+00:00

Affected: CleanStart: dotnet6-build, CleanStart: dotnet6-runtime, CleanStart: dotnet8-runtime

CVE-2024-21404 affects multiple packages. . See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-350737 EUVD-2026-350737 2026-10-03T16:59:25.534366+00:00 EUVD-2026-350737 https://cve.radiocsirt.org/vuln/fkie_cve-2024-21404 fkie_cve-2024-21404 2026-10-03T16:59:25.534377+00:00

.NET Denial of Service Vulnerability

 https://cve.radiocsirt.org/vuln/ghsa-q5x8-3vm4-xrh9 GHSA-q5x8-3vm4-xrh9 2026-10-03T16:59:25.534397+00:00

.NET Denial of Service Vulnerability

 https://cve.radiocsirt.org/vuln/gsd-2024-21404 gsd-2024-21404 2026-10-03T16:59:25.534409+00:00 gsd-2024-21404 https://cve.radiocsirt.org/vuln/msrc_cve-2024-21404 msrc_CVE-2024-21404 — .NET Denial of Service Vulnerability 2026-10-03T16:59:25.534420+00:00 msrc_CVE-2024-21404 https://cve.radiocsirt.org/vuln/rhsa-2024:0805 RHSA-2024:0805 — Red Hat Security Advisory: dotnet7.0 security update 2026-10-03T16:59:25.534436+00:00

crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard dotnet: Denial of Service in SignalR server dotnet: Denial of Service in X509Certificate2

 https://cve.radiocsirt.org/vuln/rhsa-2024:0814 RHSA-2024:0814 — Red Hat Security Advisory: .NET 6.0 security, bug fix, and enhancement update 2026-10-03T16:59:25.534455+00:00

dotnet: Denial of Service in SignalR server dotnet: Denial of Service in X509Certificate2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-21404 UBUNTU-CVE-2024-21404 2026-10-03T16:59:25.534472+00:00

Affected: Ubuntu:22.04:LTS: dotnet6, Ubuntu:22.04:LTS: dotnet7, Ubuntu:22.04:LTS: dotnet8

.NET Denial of Service Vulnerability

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0365 WID-SEC-W-2024-0365 — Microsoft Developer Tools: Mehrere Schwachstellen ermöglichen Codeausführung 2026-10-03T16:59:25.534491+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in verschiedenen Microsoft Developer Tools ausnutzen, um beliebigen Code auszuführen oder einen Denial-of-Service-Zustand zu verursachen.