Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Asp\.net_core
(Microsoft)Repositories |
Unknown: This might be proprietary software. |
#Vulnerabilities | 33 |
Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2024-02-13 | CVE-2024-21386 | .NET Denial of Service Vulnerability | Asp\.net_core, Visual_studio_2022 | N/A | ||
2024-02-13 | CVE-2024-21404 | .NET Denial of Service Vulnerability | Asp\.net_core, Visual_studio_2022 | N/A | ||
2018-09-13 | CVE-2018-8409 | A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1. | \.net_core, Asp\.net_core, System\.io\.pipelines | 7.5 | ||
2018-07-11 | CVE-2018-8356 | A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, ASP.NET Core 1.1, Microsoft .NET Framework 4.5.2, ASP.NET Core 2.0, ASP.NET Core 1.0, .NET Core 1.1, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework... | \.net_core, \.net_framework, \.net_framework_developer_pack, Asp\.net_core, Powershell_core | 5.5 | ||
2018-03-14 | CVE-2018-0875 | .NET Core 1.0, .NET Core 1.1, NET Core 2.0 and PowerShell Core 6.0.0 allow a denial of Service vulnerability due to how specially crafted requests are handled, aka ".NET Core Denial of Service Vulnerability". | Asp\.net_core, Powershell_core | 7.5 | ||
2020-01-14 | CVE-2020-0602 | A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'. | Asp\.net_core, Enterprise_linux, Enterprise_linux_eus | 7.5 | ||
2020-01-14 | CVE-2020-0603 | A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka 'ASP.NET Core Remote Code Execution Vulnerability'. | Asp\.net_core, Enterprise_linux, Enterprise_linux_eus | 8.8 | ||
2018-07-11 | CVE-2018-8171 | A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MVC 5.2. | Asp\.net_core, Asp\.net_model_view_controller, Asp\.net_webpages | 7.5 | ||
2019-09-11 | CVE-2019-1302 | An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests, aka 'ASP.NET Core Elevation Of Privilege Vulnerability'. | Asp\.net_core | N/A | ||
2019-07-15 | CVE-2019-1075 | A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'. | Asp\.net_core | 6.1 |