.NET Core

15 results · Feed

• High 7.8
  CVE-2020-1147 Exploited Public exploit EPSS 96%

  .NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability

  A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulne…

  Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Windows NuGet
  Jul 14, 2020

  KEV Nov 3, 2021
• High 8.8
  CVE-2020-0606 EPSS 18%

  Remote code execution in Microsoft.WindowsDesktop.App.Ref

  A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framewor…

  Microsoft Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 Windows NuGet
  Jan 14, 2020
• Unscored —
  CVE-2020-0605 EPSS 18%

  A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a f…

  Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Windows
  Jan 14, 2020
• High 7.5
  CVE-2019-1301

  High severity vulnerability that affects System.Management.Automation

  A denial of service vulnerability exists when .NET Core improperly handles web requests, aka '.NET Core Denial of Service Vulnerability'.

  Microsoft .NET Core System.Management.Automation NuGet
  Sep 11, 2019
• High 7.5
  CVE-2019-0981

  Denial of service in ASP.NET Core

  A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0980.

  Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Windows NuGet
  May 16, 2019
• High 7.5
  CVE-2019-0980

  Denial of service in ASP.NET Core

  A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981.

  Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Windows NuGet
  May 16, 2019
• High 7.5
  CVE-2019-0820

  Regular Expression Denial of Service in System.Text.RegularExpressions

  A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.

  Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Windows NuGet
  May 16, 2019
• Medium 5.9
  CVE-2019-0657

  Improper Input Validation in .Net Framework API's

  A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.

  Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 NuGet
  Mar 6, 2019
• High 7.5
  CVE-2019-0545

  Exposure of Sensitive Information in System.Net.Http

  An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Mi…

  Microsoft .NET Core Microsoft .NET Framework Microsoft.NETCore.App NuGet
  Jan 8, 2019
• Medium 6.5
  CVE-2018-8416

  Tampering vulnerability in .NET Core

  A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1.

  Microsoft .NET Core Microsoft.NETCore.App mono Ubuntu NuGet
  Nov 14, 2018
• High 7.5
  CVE-2018-8292 EPSS 15%

  .NET Core Information Disclosure

  An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core…

  Microsoft .NET Core PowerShell Core System.Net.Http NuGet
  Oct 10, 2018
• High 7.5
  CVE-2018-8409

  Denial of service vulnerability exists when System.IO.Pipelines improperly handles requests

  A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1.

  Microsoft ASP.NET Core .NET Core System.IO.Pipelines NuGet
  Sep 13, 2018
• Medium 5.5
  CVE-2018-8356

  Improper Certificate Validation in Microsoft .NET Framework components

  A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 3.0, Micros…

  Microsoft ASP.NET Core .NET Core Microsoft .NET Framework NuGet
  Jul 11, 2018
• High 7.5
  CVE-2018-0875

  .NET Core Denial of Service Vulnerability

  .NET Core 1.0, .NET Core 1.1, NET Core 2.0 and PowerShell Core 6.0.0 allow a denial of Service vulnerability due to how specially crafted requests are handled, aka ".NET Core Denial of Service Vulnerability".

  Microsoft .NET Core Microsoft.NETCore.Jit NuGet
  Mar 14, 2018
• High 7.5
  CVE-2017-11770

  Improper Certificate Validation

  .NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of service vulnerability exists when .NET Core improperly handles p…

  Microsoft .NET Core Microsoft.NETCore.App System.Security.Cryptography.X509Certificates NuGet
  Nov 15, 2017