ASP.NET Core

10 results · Clear filters · Feed

• High —
  CVE-2020-0603 EPSS 23%

  Remote code execution in ASP.NET Core

  A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka 'ASP.NET Core R…

  Microsoft ASP.NET Core Microsoft.AspNetCore.App.Runtime.win-x64 Microsoft.AspNetCore.App.Runtime.win-x86 NuGet
  Jan 14, 2020
• High 7.5
  CVE-2019-0982

  Denial of service in ASP.NET Core

  A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

  Microsoft ASP.NET Core Microsoft.AspNetCore.SignalR.Protocols.MessagePack NuGet
  May 16, 2019
• High 7.5
  CVE-2019-0564

  Denial of service in ASP.NET Core

  A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548.

  Microsoft ASP.NET Core Microsoft.AspNetCore.All Microsoft.NETCore.App NuGet
  Jan 8, 2019
• High 7.5
  CVE-2018-8409

  Denial of service vulnerability exists when System.IO.Pipelines improperly handles requests

  A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1.

  Microsoft ASP.NET Core .NET Core System.IO.Pipelines NuGet
  Sep 13, 2018
• High 7.5
  CVE-2018-8171 EPSS 11%

  Security feature bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated

  A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MV…

  Microsoft ASP.NET Core ASP.NET ASP.NET MVC 5.2 NuGet
  Jul 11, 2018
• High 8.8
  CVE-2018-0787

  ASP.NET Core allow an elevation of privilege

  ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how web applications that are created from templates validate web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability".

  Microsoft ASP.NET Core Microsoft.AspNetCore.Server.Kestrel.Core Microsoft.AspNetCore.HttpOverrides NuGet
  Mar 14, 2018
• High 8.8
  CVE-2017-11879

  Open redirect in ASP.NET Core

  ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core Elevation Of Privilege Vulnerability".

  Microsoft ASP.NET Core Microsoft.AspNetCore.All Microsoft.AspNetCore.Mvc.Core NuGet
  Nov 15, 2017
• High 7.5
  CVE-2017-8700 EPSS 10%

  Cross-origin Resource Sharing bypass in ASP.NET Core

  ASP.NET Core 1.0, 1.1, and 2.0 allow an attacker to bypass Cross-origin Resource Sharing (CORS) configurations and retrieve normally restricted content from a web application, aka "ASP.NET Core Information Disclosure Vulnerability".

  Microsoft ASP.NET Core Microsoft.AspNetCore.Mvc.Core Microsoft.AspNetCore.Mvc.Cors NuGet
  Nov 15, 2017
• High 7.5
  CVE-2017-0247 EPSS 17%

  ASP.NET Core fails to properly validate web requests

  A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party claims that the issue is that the TextEncoder.EncodeCore function in the System.Text.Encodings.Web package…

  Microsoft ASP.NET Core Microsoft.AspNetCore.Mvc.Core Microsoft.AspNetCore.Mvc.Cors NuGet
  May 12, 2017
• High 7.3
  CVE-2017-0249

  High severity vulnerability that affects Microsoft.AspNetCore.Mvc

  An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.

  Microsoft ASP.NET Core Microsoft.AspNetCore.Mvc.Core System.Text.Encodings.Web NuGet
  May 12, 2017