Microsoft.NETCore.App

6 results · Clear filters · Feed

• High 7.8
  CVE-2020-1147 Exploited Public exploit EPSS 96%

  .NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability

  A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulne…

  Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Windows NuGet
  Jul 14, 2020

  KEV Nov 3, 2021
• High 7.5
  CVE-2020-1108

  .NET Core & .NET Framework Denial of Service Vulnerability

  A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Core or .NET Framework web application. The vul…

  Microsoft Microsoft .NET Framework 3.5 AND 4.8 Microsoft .NET Framework 3.5 AND 4.7.2 Microsoft .NET Framework 4.8 NuGet
  May 21, 2020
• High 7.5
  CVE-2019-0564

  Denial of service in ASP.NET Core

  A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548.

  Microsoft ASP.NET Core Microsoft.NETCore.App Microsoft.AspNetCore.All NuGet
  Jan 8, 2019
• High 7.5
  CVE-2019-0545

  Exposure of Sensitive Information in System.Net.Http

  An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Mi…

  Microsoft .NET Core Microsoft .NET Framework Microsoft.NETCore.App NuGet
  Jan 8, 2019
• High 7.5
  CVE-2017-11770

  Improper Certificate Validation

  .NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of service vulnerability exists when .NET Core improperly handles p…

  Microsoft .NET Core Microsoft.NETCore.App System.Security.Cryptography.X509Certificates NuGet
  Nov 15, 2017
• High 7.5
  CVE-2017-8585

  Improper Input Validation in Microsoft.NETCore.App

  Microsoft .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7 allow an attacker to send specially crafted requests to a .NET web application, resulting in denial of service, aka .NET Denial of Service Vulnerability.

  Microsoft Microsoft .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7 Microsoft.NETCore.App NuGet
  Jul 11, 2017