<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 04 Oct 2026 00:31:48 +0000</lastBuildDate>
    <item>
      <title>ALSA-2024:0805 — Important: dotnet7.0 security update</title>
      <link>https://cve.radiocsirt.org/vuln/alsa-2024:0805</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; AlmaLinux:9: aspnetcore-runtime-7.0, AlmaLinux:9: aspnetcore-targeting-pack-7.0, AlmaLinux:9: dotnet-apphost-pack-7.0, AlmaLinux:9: dotnet-hostfxr-7.0, AlmaLinux:9: dotnet-runtime-7.0, AlmaLinux:9: dotnet-sdk-7.0, AlmaLinux:9: dotnet-sdk-7.0-source-built-artifacts, AlmaLinux:9: dotnet-targeting-pack-7.0, AlmaLinux:9: dotnet-templates-7.0&lt;/p&gt;
&lt;p&gt;.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.&lt;/p&gt;
&lt;p&gt;New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.116 and .NET Runtime 7.0.16.&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;* dotnet: Denial of Service in SignalR server (CVE-2024-21386)
* dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)&lt;/p&gt;
&lt;p&gt;For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; AlmaLinux:9: aspnetcore-runtime-7.0, AlmaLinux:9: aspnetcore-targeting-pack-7.0, AlmaLinux:9: dotnet-apphost-pack-7.0, AlmaLinux:9: dotnet-hostfxr-7.0, AlmaLinux:9: dotnet-runtime-7.0, AlmaLinux:9: dotnet-sdk-7.0, AlmaLinux:9: dotnet-sdk-7.0-source-built-artifacts, AlmaLinux:9: dotnet-targeting-pack-7.0, AlmaLinux:9: dotnet-templates-7.0&lt;/p&gt;
&lt;p&gt;.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.&lt;/p&gt;
&lt;p&gt;New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.116 and .NET Runtime 7.0.16.&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;* dotnet: Denial of Service in SignalR server (CVE-2024-21386)
* dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)&lt;/p&gt;
&lt;p&gt;For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/alsa-2024:0805</guid>
    </item>
    <item>
      <title>bdu:2024-01702</title>
      <link>https://cve.radiocsirt.org/vuln/bdu:2024-01702</link>
      <description>bdu:2024-01702</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bdu:2024-01702</guid>
    </item>
    <item>
      <title>BELL-CVE-2024-21404</title>
      <link>https://cve.radiocsirt.org/vuln/bell-cve-2024-21404</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Alpaquita:stream: dotnet6-build, Alpaquita:stream: dotnet6-runtime&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Alpaquita:stream: dotnet6-build, Alpaquita:stream: dotnet6-runtime&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bell-cve-2024-21404</guid>
    </item>
    <item>
      <title>certfr-2024-avi-0129 — De multiples vulnérabilités ont été corrigées dans &lt;span
class="textit"&gt;Microsoft .Net&lt;/span&gt;. Elles permettent à un at…</title>
      <link>https://cve.radiocsirt.org/vuln/certfr-2024-avi-0129</link>
      <description>certfr-2024-avi-0129</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/certfr-2024-avi-0129</guid>
    </item>
    <item>
      <title>CLEANSTART-2025-MP76988 — .NET Denial of Service Vulnerability</title>
      <link>https://cve.radiocsirt.org/vuln/cleanstart-2025-mp76988</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; CleanStart: dotnet6-build, CleanStart: dotnet6-runtime, CleanStart: dotnet8-runtime&lt;/p&gt;
&lt;p&gt;CVE-2024-21404 affects multiple packages. . See references for individual vulnerability details.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; CleanStart: dotnet6-build, CleanStart: dotnet6-runtime, CleanStart: dotnet8-runtime&lt;/p&gt;
&lt;p&gt;CVE-2024-21404 affects multiple packages. . See references for individual vulnerability details.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cleanstart-2025-mp76988</guid>
    </item>
    <item>
      <title>EUVD-2026-350737</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-350737</link>
      <description>EUVD-2026-350737</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-350737</guid>
    </item>
    <item>
      <title>fkie_cve-2024-21404</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2024-21404</link>
      <description>&lt;p&gt;.NET Denial of Service Vulnerability&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;.NET Denial of Service Vulnerability&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2024-21404</guid>
    </item>
    <item>
      <title>GHSA-q5x8-3vm4-xrh9</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-q5x8-3vm4-xrh9</link>
      <description>&lt;p&gt;.NET Denial of Service Vulnerability&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;.NET Denial of Service Vulnerability&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-q5x8-3vm4-xrh9</guid>
    </item>
    <item>
      <title>gsd-2024-21404</title>
      <link>https://cve.radiocsirt.org/vuln/gsd-2024-21404</link>
      <description>gsd-2024-21404</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/gsd-2024-21404</guid>
    </item>
    <item>
      <title>msrc_CVE-2024-21404 — .NET Denial of Service Vulnerability</title>
      <link>https://cve.radiocsirt.org/vuln/msrc_cve-2024-21404</link>
      <description>msrc_CVE-2024-21404</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/msrc_cve-2024-21404</guid>
    </item>
    <item>
      <title>RHSA-2024:0805 — Red Hat Security Advisory: dotnet7.0 security update</title>
      <link>https://cve.radiocsirt.org/vuln/rhsa-2024:0805</link>
      <description>&lt;p&gt;crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard dotnet: Denial of Service in SignalR server dotnet: Denial of Service in X509Certificate2&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard dotnet: Denial of Service in SignalR server dotnet: Denial of Service in X509Certificate2&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/rhsa-2024:0805</guid>
    </item>
    <item>
      <title>RHSA-2024:0814 — Red Hat Security Advisory: .NET 6.0 security, bug fix, and enhancement update</title>
      <link>https://cve.radiocsirt.org/vuln/rhsa-2024:0814</link>
      <description>&lt;p&gt;dotnet: Denial of Service in SignalR server dotnet: Denial of Service in X509Certificate2&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;dotnet: Denial of Service in SignalR server dotnet: Denial of Service in X509Certificate2&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/rhsa-2024:0814</guid>
    </item>
    <item>
      <title>UBUNTU-CVE-2024-21404</title>
      <link>https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-21404</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:22.04:LTS: dotnet6, Ubuntu:22.04:LTS: dotnet7, Ubuntu:22.04:LTS: dotnet8&lt;/p&gt;
&lt;p&gt;.NET Denial of Service Vulnerability&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:22.04:LTS: dotnet6, Ubuntu:22.04:LTS: dotnet7, Ubuntu:22.04:LTS: dotnet8&lt;/p&gt;
&lt;p&gt;.NET Denial of Service Vulnerability&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-21404</guid>
    </item>
    <item>
      <title>WID-SEC-W-2024-0365 — Microsoft Developer Tools: Mehrere Schwachstellen ermöglichen Codeausführung</title>
      <link>https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0365</link>
      <description>&lt;p&gt;Ein entfernter Angreifer kann mehrere Schwachstellen in verschiedenen Microsoft Developer Tools ausnutzen, um beliebigen Code auszuführen oder einen Denial-of-Service-Zustand zu verursachen.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein entfernter Angreifer kann mehrere Schwachstellen in verschiedenen Microsoft Developer Tools ausnutzen, um beliebigen Code auszuführen oder einen Denial-of-Service-Zustand zu verursachen.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0365</guid>
    </item>
  </channel>
</rss>
