CVSS: 7.8EPSS: 0%CPEs: 16EXPL: 0CVE-2020-1257
https://notcve.org/view.php?id=CVE-2020-1257
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1278, CVE-2020-1293. Se presenta una vulnerabilidad de elevación de privilegios cuando el Diagnostics Hub Standard Collector Service maneja inapropiadamente las operaciones de archivo, también se conoce como "Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability". Este ID de CVE es diferente de CVE-2020-1278, CVE-2020-1293 • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1257 •
CVSS: 7.8EPSS: 0%CPEs: 17EXPL: 0CVE-2020-1203
https://notcve.org/view.php?id=CVE-2020-1203
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle objects in memory, aka 'Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1202. Se presenta una vulnerabilidad de elevación de privilegios cuando Diagnostics Hub Standard Collector o Visual Studio Standard Collector presenta un fallo al manejar apropiadamente objetos en memoria, también se conoce como "Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability". Este ID de CVE es diferente de CVE-2020-1202 • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1203 •
CVSS: 7.8EPSS: 0%CPEs: 17EXPL: 0CVE-2020-1202
https://notcve.org/view.php?id=CVE-2020-1202
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle objects in memory, aka 'Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1203. Se presenta una vulnerabilidad de elevación de privilegios cuando Diagnostics Hub Standard Collector o Visual Studio Standard Collector presenta un fallo al manejar apropiadamente objetos en memoria, también se conoce como "Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability". Este ID de CVE es diferente de CVE-2020-1203 • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1202 •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2020-1161 – dotnet: Denial of service due to infinite loop
https://notcve.org/view.php?id=CVE-2020-1161
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'. Existe una vulnerabilidad denegación de servicio cuando ASP.NET Core maneja inapropiadamente las peticiones web, también se conoce como "ASP.NET Core Denial of Service Vulnerability". An infinite loop was found in the HTTP Routing component of Microsoft.AspNetCore.App, which could be exploited by a remote, unauthenticated attacker. This flaw allows an attacker without special privileges to send crafted requests to a machine running an ASP.NET Core application, triggering the infinite loop and causing a denial of service in that application, for example, a web server. • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1161 https://access.redhat.com/security/cve/CVE-2020-1161 https://bugzilla.redhat.com/show_bug.cgi?id=1827645 • CWE-400: Uncontrolled Resource Consumption •
CVSS: 7.5EPSS: 0%CPEs: 132EXPL: 0CVE-2020-1108 – dotnet: Denial of service via untrusted input
https://notcve.org/view.php?id=CVE-2020-1108
A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Core & .NET Framework Denial of Service Vulnerability'. Se presenta una vulnerabilidad denegación de servicio cuando .NET Core o .NET Framework manejan inapropiadamente las peticiones web, también se conoce como ".NET Core & .NET Framework Denial of Service Vulnerability" An integer overflow condition was found in dotnet and dotnet3.1's BinaryReader Read7BitEncodedInt() method. This method is used by BinaryReader's ReadString() method, and given a certain input, and cause a denial of service to dotnet applications using BinaryReader. The exploitation of this flaw depends on the application but does not inherently require the attacker to be authenticated or have any specific privileges. An attacker could exploit this flaw remotely via the internet by sending crafted data to a dotnet application that is passed into Read7BitEncodedInt(), resulting in a denial of service when the output is used by ReadString(). • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1108 https://access.redhat.com/security/cve/CVE-2020-1108 https://bugzilla.redhat.com/show_bug.cgi?id=1827643 • CWE-190: Integer Overflow or Wraparound •