NuGet

607 results · Clear filters · Feed

• High 7.5
  CVE-2018-0875

  .NET Core Denial of Service Vulnerability

  .NET Core 1.0, .NET Core 1.1, NET Core 2.0 and PowerShell Core 6.0.0 allow a denial of Service vulnerability due to how specially crafted requests are handled, aka ".NET Core Denial of Service Vulnerability".

  Microsoft .NET Core Microsoft.NETCore.Jit NuGet
  Mar 14, 2018
• High 7.5
  CVE-2018-0930 EPSS 12%

  ChakraCore RCE Vulnerability

  ChakraCore and Microsoft Edge in Microsoft Windows 10 1709 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872,…

  Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  Mar 14, 2018
• High 7.5
  CVE-2018-0934 Public exploit EPSS 66%

  ChakraCore RCE Vulnerability

  ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE I…

  Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  Mar 14, 2018
• High 7.5
  CVE-2018-0872 EPSS 16%

  ChakraCore RCE Vulnerability

  ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerab…

  Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  Mar 14, 2018
• High 8.8
  CVE-2018-0787

  ASP.NET Core allow an elevation of privilege

  ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how web applications that are created from templates validate web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability".

  Microsoft ASP.NET Core Microsoft.AspNetCore.Server.Kestrel.Core Microsoft.AspNetCore.HttpOverrides NuGet
  Mar 14, 2018
• High 7.5
  CVE-2018-0933 Public exploit EPSS 66%

  ChakraCore RCE Vulnerability

  ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE I…

  Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  Mar 14, 2018
• High 7.5
  CVE-2018-0925 EPSS 11%

  ChakraCore RCE Vulnerability

  ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0876, CVE-2018-0889, CVE-2018-0893, and CVE-2018-0935.

  Microsoft ChakraCore Microsoft.ChakraCore NuGet
  Mar 14, 2018
• High 7.5
  CVE-2018-0931 EPSS 11%

  ChakraCore RCE Vulnerability

  ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE I…

  Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  Mar 14, 2018
• High 7.5
  CVE-2018-0856 EPSS 15%

  ChakraCore RCE Vulnerability

  Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-…

  Microsoft Microsoft Edge, ChakraCore Microsoft.ChakraCore Browsers NuGet
  Feb 15, 2018
• High 7.5
  CVE-2018-0834 Public exploit EPSS 55%

  ChakraCore RCE Vulnerability

  Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

  Microsoft Microsoft Edge, ChakraCore Microsoft.ChakraCore Browsers NuGet
  Feb 15, 2018
• High 7.5
  CVE-2018-0858 EPSS 15%

  ChakraCore RCE Vulnerability

  ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0836, CVE-2018-0837, CVE-2…

  Microsoft ChakraCore Microsoft.ChakraCore NuGet
  Feb 15, 2018
• High 7.5
  CVE-2018-0857 EPSS 15%

  ChakraCore RCE Vulnerability

  Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

  Microsoft Microsoft Edge, ChakraCore Microsoft.ChakraCore Browsers NuGet
  Feb 15, 2018
• High 7.5
  CVE-2018-0859 EPSS 18%

  ChakraCore RCE Vulnerability

  Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

  Microsoft Microsoft Edge, ChakraCore Microsoft.ChakraCore Browsers NuGet
  Feb 15, 2018
• High 7.5
  CVE-2018-0860 Public exploit EPSS 68%

  ChakraCore RCE Vulnerability

  Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

  Microsoft Microsoft Edge, ChakraCore Microsoft.ChakraCore Browsers NuGet
  Feb 15, 2018
• High 7.5
  CVE-2018-0836 EPSS 15%

  ChakraCore RCE Vulnerability

  Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-…

  Microsoft Microsoft Edge, ChakraCore Microsoft.ChakraCore Browsers NuGet
  Feb 15, 2018
• High 7.5
  CVE-2018-0838 Public exploit EPSS 65%

  ChakraCore RCE Vulnerability

  Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

  Microsoft Microsoft Edge, ChakraCore Microsoft.ChakraCore Browsers NuGet
  Feb 15, 2018
• High 7.5
  CVE-2018-0837 Public exploit EPSS 65%

  ChakraCore RCE Vulnerability

  Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

  Microsoft Microsoft Edge, ChakraCore Microsoft.ChakraCore Browsers NuGet
  Feb 15, 2018
• High 7.5
  CVE-2018-0835 Public exploit EPSS 65%

  ChakraCore RCE Vulnerability

  Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

  Microsoft Microsoft Edge, ChakraCore Microsoft.ChakraCore Browsers NuGet
  Feb 15, 2018
• High 7.5
  CVE-2016-10707

  Denial of Service in jquery

  jQuery 3.0.0-rc.1 is vulnerable to Denial of Service (DoS) due to removing a logic that lowercased attribute names. Any attribute getter using a mixed-cased name for boolean attributes goes into an infinite recursion, exceeding the stack call limit.

  jquery-rails org.webjars.npm:jquery jQuery jquery npm Maven NuGet RubyGems
  Jan 18, 2018
• High 7.5
  CVE-2018-0764

  Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents

  Microsoft .NET Framework 1.1, 2.0, 3.0, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 5.7 and .NET Core 1.0. 1.1 and 2.0 allow a denial of service vulnerability due to the way XML documents are processed, aka ".NET and .NET Core Denial Of Service Vu…

  Microsoft .NET Framework and .NET Core System.Security.Cryptography.Xml NuGet
  Jan 10, 2018
• High 7.5
  CVE-2018-0786

  Improper Certificate Validation in Microsoft .NET Framework components

  Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, .NET Core 1.0 and 2.0, and PowerShell Core 6.0.0 allow a security feature bypass vulnerability due to the way certificates are validated, aka ".NET Security Feature B…

  Microsoft .NET Framework, .NET Core, and PowerShell Core System.ServiceModel.NetTcp System.ServiceModel.Security NuGet
  Jan 10, 2018
• High 7.5
  CVE-2018-0818

  ChakraCore RCE Vulnerability

  Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feat…

  Microsoft ChakraCore Microsoft.ChakraCore NuGet
  Jan 10, 2018
• High 7.5
  CVE-2017-11889

  ChakraCore RCE Vulnerability

  ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine…

  Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  Dec 12, 2017
• High 7.5
  CVE-2017-11911 Public exploit EPSS 65%

  ChakraCore RCE Vulnerability

  ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulne…

  Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  Dec 12, 2017
• High 7.5
  CVE-2017-11916

  ChakraCore RCE Vulnerability

  ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886…

  Microsoft ChakraCore Microsoft.ChakraCore NuGet
  Dec 12, 2017
• High 7.5
  CVE-2017-11909 Public exploit EPSS 65%

  ChakraCore vulnerable to remote code execution

  ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulne…

  Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  Dec 12, 2017
• High 7.5
  CVE-2017-11910

  ChakraCore vulnerable to remote code execution due to insufficient InlineCache check

  ChakraCore and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…

  Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  Dec 12, 2017
• High 7.5
  CVE-2017-11908

  ChakraCore RCE Vulnerability

  ChakraCore and Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2…

  Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  Dec 12, 2017
• High 7.5
  CVE-2017-11914 Public exploit EPSS 63%

  ChakraCore vulnerable to privilege escalation due to exposure from scriptFunction

  ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…

  Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  Dec 12, 2017
• High 7.5
  CVE-2017-11905

  ChakraCore RCE Vulnerability

  ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memor…

  Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  Dec 12, 2017
• High 7.5
  CVE-2017-11893 Public exploit EPSS 68%

  ChakraCore vulnerable to remote code execution

  ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memor…

  Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  Dec 12, 2017
• High 7.5
  CVE-2017-11883

  Denial of service in ASP.NET Core

  .NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly handling web requests, aka ".NET CORE Denial Of Service Vulnerability".

  Microsoft ASP.NET Microsoft.AspNetCore.Server.HttpSys Microsoft.Net.Http.Server NuGet
  Nov 15, 2017
• High 7.5
  CVE-2017-11870 Public exploit EPSS 60%

  Chakra Core vulnerable to privilege escalation when writing to JavaScript null scope objects

  ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vu…

  Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  Nov 15, 2017
• High 7.5
  CVE-2017-11770

  Improper Certificate Validation

  .NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of service vulnerability exists when .NET Core improperly handles p…

  Microsoft .NET Core Microsoft.NETCore.App System.Security.Cryptography.X509Certificates NuGet
  Nov 15, 2017
• High 7.5
  CVE-2017-11862

  Chakra Core vulnerable to privilege escalation due to type confusion

  ChakraCore and Microsoft Edge in Windows 10 1709 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerabi…

  Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  Nov 15, 2017
• High 8.8
  CVE-2017-11879

  Open redirect in ASP.NET Core

  ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core Elevation Of Privilege Vulnerability".

  Microsoft ASP.NET Core Microsoft.AspNetCore.All Microsoft.AspNetCore.Mvc.Core NuGet
  Nov 15, 2017
• High 7.5
  CVE-2017-11871

  Chakra Core vulnerable to privilege escalation due to reading an invalid pointer

  ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vu…

  Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  Nov 15, 2017
• High 7.5
  CVE-2017-8700 EPSS 10%

  Cross-origin Resource Sharing bypass in ASP.NET Core

  ASP.NET Core 1.0, 1.1, and 2.0 allow an attacker to bypass Cross-origin Resource Sharing (CORS) configurations and retrieve normally restricted content from a web application, aka "ASP.NET Core Information Disclosure Vulnerability".

  Microsoft ASP.NET Core Microsoft.AspNetCore.Mvc.Core Microsoft.AspNetCore.Mvc.Cors NuGet
  Nov 15, 2017
• High 7.5
  CVE-2017-11797

  ChakraCore RCE Vulnerability

  ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-…

  Microsoft ChakraCore Microsoft.ChakraCore NuGet
  Oct 13, 2017
• High 7.5
  CVE-2017-11792

  ChakraCore RCE Vulnerability

  ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allow an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This …

  Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  Oct 13, 2017