Lucene search
+L

2214 matches found

OpenVAS
OpenVAS
•added 2018/09/14 12:00 a.m.•51 views

ASP.NET Core SDK 'System.IO.Pipelines' Denial of Service Vulnerability (Sep 2018) - Windows

ASP.NET Core SDK is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS6.3AI score0.06558EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2018/09/14 12:00 a.m.•185 views

ASP.NET Core 'System.IO.Pipelines' Denial of Service Vulnerability (Sep 2018) - Windows

ASP.NET Core is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:microsoft:asp.netcore...

7.5CVSS6.3AI score0.06558EPSS
SaveExploits0References2
NVD
NVD
•added 2018/09/13 12:29 a.m.•36 views

CVE-2018-8409

A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1...

7.5CVSS7.3AI score0.06558EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/09/13 12:00 a.m.•1 views

CVE-2018-8409: Undefined Security Weakness

A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1...

7.5CVSS6.8AI score0.06558EPSS
SaveExploits0References1
EUVD
EUVD
•added 2018/09/13 12:00 a.m.•17 views

EUVD-2018-0622

A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1...

7.5CVSS6AI score0.06558EPSS
SaveExploits0References4
CVE
CVE
•added 2018/09/13 12:00 a.m.•144 views

CVE-2018-8409

The CVE-2018-8409 entry concerns a Denial of Service affecting System.IO.Pipelines used with .NET Core 2.1 / ASP.NET Core 2.1. The vulnerability occurs when System.IO.Pipelines improperly handles requests, leading to partial availability impact. The connected documents confirm the affected compon...

7.5CVSS7.2AI score0.06558EPSS
SaveExploits0References2Affected Software3
Tenable Nessus
Tenable Nessus
•added 2018/09/13 12:00 a.m.•129 views

Security Updates for Microsoft .NET core and ASP.NET Core (DoS) (September 2018)

The Microsoft ASP.NET Core installation on the remote host contains vulnerable packages. It is, therefore,affected by a Denial of Service vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft...

7.5CVSS6.7AI score0.06558EPSS
SaveExploits0References5
Symantec
Symantec
•added 2018/09/11 12:00 a.m.•76 views

Microsoft System.IO.Pipelines CVE-2018-8409 Denial of Service Vulnerability

Description Microsoft System.IO.Pipelines is prone to a remote denial of service vulnerability. An attacker can exploit this issue to cause a denial of service condition. Technologies Affected Microsoft .NET Core 2.1 Microsoft ASP.NET Core 2.1 Microsoft System.IO.Pipelines Recommendations Block...

0.9AI score0.06558EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2018/08/29 12:00 a.m.•25 views

ASP.NET DEBUG Method Enabled

It is possible to send debug statements to the remote ASP scripts via the http DEBUG method. A remote, unauthenticated attacker may leverage this to alter the runtime of the remote scripts. No source data...

7.4AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2018/08/28 12:00 a.m.•61 views

Microsoft ASP.NET Application Tracing trace.axd Information Disclosure

The ASP.NET web application running in the root directory of the remote web server has application tracing enabled. This allows an unauthenticated, remote attacker to view the last 50 web requests made to the server, including sensitive information like Session ID values and the physical path to...

6.8AI score
SaveExploits0References1
myhack58
myhack58
•added 2018/08/08 12:00 a.m.•917 views

For ASP. NET resource files. RESX and deserialization vulnerability research-exploit warning-the black bar safety net

ASP. NET application resource files are typically used as a localized storage, they can be used to store user interface elements or can be easily translated string to1. These resource files are generally used. resx as the file expansion name, and when they are in. resources as files to expand the...

8AI score0.3282EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2018/07/13 12:00 a.m.•173 views

Microsoft ASP.NET Core Security Feature Bypass Vulnerability (Jul 2018)

This host is missing an important security update according to Microsoft advisory CVE-2018-8171. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

7.5CVSS7.3AI score0.1048EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2018/07/13 12:00 a.m.•176 views

Security Updates for Microsoft .NET core and ASP.NET (DoS) (July 2018)

The Microsoft ASP.NET Core installations on the remote host are missing a security update. It is, therefore, affected by the following vulnerability : - A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates. An attacker coul...

5.5CVSS6.6AI score0.00748EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2018/07/13 12:00 a.m.•369 views

Security Updates for Microsoft .NET core and ASP.NET (Bypass) (July 2018)

The Microsoft .NET and ASP.NET installations on the remote host are missing a security update. It is, therefore, affected by the following vulnerability : - A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated. An attacker who...

7.5CVSS7.4AI score0.1048EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2018/07/13 12:00 a.m.•633 views

Microsoft ASP.NET Core Privilege Escalation (March 2018)

The remote Windows host has an installation of ASP.NET Core containing the packages HttpOverrides and/or Server.Kestrel.Core with versions 2.0.0 or 2.0.1 and therefore is affected by a privilege escalation vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

8.8CVSS7.9AI score0.09573EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2018/07/12 1:19 a.m.•45 views

CVE-2018-8356

A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 3.0, Microsoft .NET Framework...

6.5CVSS2.4AI score0.00748EPSS
SaveExploits0References2
CNVD
CNVD
•added 2018/07/12 12:00 a.m.•50 views

Microsoft ASP.NET Core Security Bypass Vulnerability

Microsoft ASP.NET is a cross-platform open-source framework from the American company Microsoft Microsoft. The framework is used to build cloud-based applications such as Web applications, IoT applications, and mobile backends. A security bypass vulnerability exists in Microsoft ASP.NET Core, whi...

7.5CVSS7.4AI score0.1048EPSS
SaveExploits0References1
NVD
NVD
•added 2018/07/11 12:29 a.m.•26 views

CVE-2018-8356

A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 3.0, Microsoft .NET Framework...

5.5CVSS6.4AI score0.00748EPSS
SaveExploits0References3
OSV
OSV
•added 2018/07/11 12:29 a.m.•34 views

CVE-2018-8356

A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 3.0, Microsoft .NET Framework...

5.5CVSS6.6AI score
SaveExploits0References3
Prion
Prion
•added 2018/07/11 12:29 a.m.•52 views

Security feature bypass

A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MVC 5.2...

5CVSS7.4AI score0.1048EPSS
SaveExploits0References3Affected Software3
Rows per page
Query Builder