ASP.NET Core

20 results · Feed

• High —
  CVE-2020-0603 EPSS 23%

  Remote code execution in ASP.NET Core

  A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka 'ASP.NET Core R…

  Microsoft ASP.NET Core Microsoft.AspNetCore.App.Runtime.win-x64 Microsoft.AspNetCore.App.Runtime.win-x86 NuGet
  Jan 14, 2020
• Medium —
  CVE-2020-0602

  Denial of service in ASP.NET Core

  A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

  Microsoft ASP.NET Core Microsoft.AspNetCore.App.Runtime.win-x64 Microsoft.AspNetCore.App.Runtime.win-x86 NuGet
  Jan 14, 2020
• Medium —
  CVE-2019-1302

  Elevation of privilege in ASP.NET Core

  An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests, aka 'ASP.NET Core Elevation Of Privilege Vulnerability'.

  Microsoft ASP.NET Core Microsoft.AspNetCore.SpaServices NuGet
  Sep 11, 2019
• Medium 6.1
  CVE-2019-1075

  Open redirect in ASP.NET Core

  A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'.

  Microsoft ASP.NET Core Microsoft.AspNetCore.All Microsoft.AspNetCore.App NuGet
  Jul 15, 2019
• High 7.5
  CVE-2019-0982

  Denial of service in ASP.NET Core

  A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

  Microsoft ASP.NET Core Microsoft.AspNetCore.SignalR.Protocols.MessagePack NuGet
  May 16, 2019
• Unscored —
  CVE-2019-0815

  A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of…

  Microsoft ASP.NET Core
  Apr 9, 2019
• High 7.5
  CVE-2019-0564

  Denial of service in ASP.NET Core

  A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548.

  Microsoft ASP.NET Core Microsoft.NETCore.App Microsoft.AspNetCore.All NuGet
  Jan 8, 2019
• Unscored —
  CVE-2019-0548

  A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of…

  Microsoft ASP.NET Core
  Jan 8, 2019
• High 7.5
  CVE-2018-8409

  Denial of service vulnerability exists when System.IO.Pipelines improperly handles requests

  A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1.

  Microsoft ASP.NET Core .NET Core System.IO.Pipelines NuGet
  Sep 13, 2018
• Medium 5.5
  CVE-2018-8356

  Improper Certificate Validation in Microsoft .NET Framework components

  A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 3.0, Micros…

  Microsoft ASP.NET Core .NET Core Microsoft .NET Framework NuGet
  Jul 11, 2018
• High 7.5
  CVE-2018-8171 EPSS 11%

  Security feature bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated

  A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MV…

  Microsoft ASP.NET Core ASP.NET ASP.NET MVC 5.2 NuGet
  Jul 11, 2018
• High 8.8
  CVE-2018-0787

  ASP.NET Core allow an elevation of privilege

  ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how web applications that are created from templates validate web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability".

  Microsoft ASP.NET Core Microsoft.AspNetCore.Server.Kestrel.Core Microsoft.AspNetCore.HttpOverrides NuGet
  Mar 14, 2018
• Unscored —
  CVE-2018-0808

  ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how ASP.NET web applications handle…

  Microsoft ASP.NET Core
  Mar 14, 2018
• Unscored —
  CVE-2018-0785

  ASP.NET Core 1.0. 1.1, and 2.0 allow a cross site request forgery vulnerability due to the ASP.NET Core project templat…

  Microsoft ASP.NET Core
  Jan 10, 2018
• Unscored —
  CVE-2018-0784

  ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to the ASP.NET Core project templates,…

  Microsoft ASP.NET Core
  Jan 10, 2018
• High 8.8
  CVE-2017-11879

  Open redirect in ASP.NET Core

  ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core Elevation Of Privilege Vulnerability".

  Microsoft ASP.NET Core Microsoft.AspNetCore.All Microsoft.AspNetCore.Mvc.Core NuGet
  Nov 15, 2017
• High 7.5
  CVE-2017-8700 EPSS 10%

  Cross-origin Resource Sharing bypass in ASP.NET Core

  ASP.NET Core 1.0, 1.1, and 2.0 allow an attacker to bypass Cross-origin Resource Sharing (CORS) configurations and retrieve normally restricted content from a web application, aka "ASP.NET Core Information Disclosure Vulnerability".

  Microsoft ASP.NET Core Microsoft.AspNetCore.Mvc.Core Microsoft.AspNetCore.Mvc.Cors NuGet
  Nov 15, 2017
• Medium 5.3
  CVE-2017-0256

  Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc

  A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.

  Microsoft ASP.NET Core Microsoft.AspNetCore.Mvc.Core Microsoft.AspNetCore.Mvc.Cors NuGet
  May 12, 2017
• High 7.5
  CVE-2017-0247 EPSS 17%

  ASP.NET Core fails to properly validate web requests

  A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party claims that the issue is that the TextEncoder.EncodeCore function in the System.Text.Encodings.Web package…

  Microsoft ASP.NET Core Microsoft.AspNetCore.Mvc.Core System.Text.Encodings.Web NuGet
  May 12, 2017
• High 7.3
  CVE-2017-0249

  High severity vulnerability that affects Microsoft.AspNetCore.Mvc

  An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.

  Microsoft ASP.NET Core Microsoft.AspNetCore.Mvc.Core System.Text.Encodings.Web NuGet
  May 12, 2017