CVSS: 7.5EPSS: 0%CPEs: 20EXPL: 0CVE-2024-20661 – Microsoft Message Queuing Denial of Service Vulnerability
https://notcve.org/view.php?id=CVE-2024-20661
Microsoft Message Queuing Denial of Service Vulnerability Vulnerabilidad de denegación de servicio de Microsoft Message Queuing • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20661 • CWE-400: Uncontrolled Resource Consumption CWE-476: NULL Pointer Dereference •
CVSS: 6.5EPSS: 0%CPEs: 20EXPL: 0CVE-2024-20660 – Microsoft Message Queuing Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2024-20660
Microsoft Message Queuing Information Disclosure Vulnerability Vulnerabilidad de divulgación de información de Microsoft Message Queue Server • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20660 • CWE-125: Out-of-bounds Read •
CVSS: 7.8EPSS: 0%CPEs: 26EXPL: 0CVE-2024-20653 – Microsoft Common Log File System Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2024-20653
Microsoft Common Log File System Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios del sistema de archivos de registro común de Microsoft • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20653 • CWE-125: Out-of-bounds Read •
CVSS: 8.1EPSS: 0%CPEs: 26EXPL: 0CVE-2024-20652 – Windows HTML Platforms Security Feature Bypass Vulnerability
https://notcve.org/view.php?id=CVE-2024-20652
Windows HTML Platforms Security Feature Bypass Vulnerability Vulnerabilidad de omisión de característica de seguridad de plataformas HTML de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20652 • CWE-73: External Control of File Name or Path •
CVSS: 9.8EPSS: 0%CPEs: 75EXPL: 0CVE-2024-0057 – NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
https://notcve.org/view.php?id=CVE-2024-0057
NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability Vulnerabididad en NET, .NET Framework y Visual Studio Security Feature Bypass A security feature bypass vulnerability exists when Microsoft .NET Framework-based applications use X.509 chain building APIs but do not completely validate the X.509 certificate due to a logic flaw. An attacker could present an arbitrary untrusted certificate with malformed signatures, triggering a bug in the framework. The framework will correctly report that X.509 chain building failed, but it will return an incorrect reason code for the failure. Applications which utilize this reason code to make their own chain building trust decisions may inadvertently treat this scenario as a successful chain build. This could allow an adversary to subvert the app's typical authentication logic. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0057 https://security.netapp.com/advisory/ntap-20240208-0007 https://access.redhat.com/security/cve/CVE-2024-0057 https://bugzilla.redhat.com/show_bug.cgi?id=2255386 • CWE-20: Improper Input Validation CWE-295: Improper Certificate Validation •