Product:

Asp\.net_core

(Microsoft)
Repositories

Unknown:

This might be proprietary software.

#Vulnerabilities 33
Date Id Summary Products Score Patch Annotated
2023-11-14 CVE-2023-36558 ASP.NET Core - Security Feature Bypass Vulnerability \.net, Asp\.net_core, Visual_studio_2022 5.5
2024-02-13 CVE-2024-21386 .NET Denial of Service Vulnerability Asp\.net_core, Visual_studio_2022 N/A
2024-02-13 CVE-2024-21404 .NET Denial of Service Vulnerability Asp\.net_core, Visual_studio_2022 N/A
2018-09-13 CVE-2018-8409 A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1. \.net_core, Asp\.net_core, System\.io\.pipelines 7.5
2018-07-11 CVE-2018-8356 A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, ASP.NET Core 1.1, Microsoft .NET Framework 4.5.2, ASP.NET Core 2.0, ASP.NET Core 1.0, .NET Core 1.1, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework... \.net_core, \.net_framework, \.net_framework_developer_pack, Asp\.net_core, Powershell_core 5.5
2018-03-14 CVE-2018-0875 .NET Core 1.0, .NET Core 1.1, NET Core 2.0 and PowerShell Core 6.0.0 allow a denial of Service vulnerability due to how specially crafted requests are handled, aka ".NET Core Denial of Service Vulnerability". Asp\.net_core, Powershell_core 7.5
2020-01-14 CVE-2020-0602 A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'. Asp\.net_core, Enterprise_linux, Enterprise_linux_eus 7.5
2020-01-14 CVE-2020-0603 A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka 'ASP.NET Core Remote Code Execution Vulnerability'. Asp\.net_core, Enterprise_linux, Enterprise_linux_eus 8.8
2018-07-11 CVE-2018-8171 A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MVC 5.2. Asp\.net_core, Asp\.net_model_view_controller, Asp\.net_webpages 7.5
2019-09-11 CVE-2019-1302 An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests, aka 'ASP.NET Core Elevation Of Privilege Vulnerability'. Asp\.net_core N/A