BIT-ASPNET-CORE-2020-0603

A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka 'ASP.NET Core Remote Code Execution Vulnerability'...

BIT-ASPNET-CORE-2020-1045 Microsoft ASP.NET Core Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names. The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded. The security update address...

BIT-DOTNET-SDK-2023-36558 ASP.NET Core Security Feature Bypass Vulnerability

ASP.NET Core Security Feature Bypass Vulnerability...

BIT-DOTNET-2023-36558 ASP.NET Core Security Feature Bypass Vulnerability

ASP.NET Core Security Feature Bypass Vulnerability...

BIT-ASPNET-CORE-2020-1597 ASP.NET Core Denial of Service Vulnerability

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication. A...

BIT-ASPNET-CORE-2021-1723 ASP.NET Core and Visual Studio Denial of Service Vulnerability

ASP.NET Core and Visual Studio Denial of Service Vulnerability...

BIT-ASPNET-CORE-2021-34532 ASP.NET Core and Visual Studio Information Disclosure Vulnerability

ASP.NET Core and Visual Studio Information Disclosure Vulnerability...

BIT-ASPNET-CORE-2021-43877 ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability...

BIT-ASPNET-CORE-2023-35391 ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability...

BIT-ASPNET-CORE-2023-36038 ASP.NET Core Denial of Service Vulnerability

ASP.NET Core Denial of Service Vulnerability...

BIT-ASPNET-CORE-2023-36558 ASP.NET Core Security Feature Bypass Vulnerability

ASP.NET Core Security Feature Bypass Vulnerability...

BIT-ASPNET-CORE-2023-38180 .NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability...

BIT-ASPNET-CORE-2024-21386 .NET Denial of Service Vulnerability

.NET Denial of Service Vulnerability...

BIT-ASPNET-CORE-2024-21404 .NET Denial of Service Vulnerability

.NET Denial of Service Vulnerability...

CVE-2023-45290: Allocation of Resources Without Limits or Throttling

When parsing a multipart form either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile, limits on the total size of the parsed form were not applied to the memory consumed while reading a single form line. This permits a...

Security Bulletin: IBM Cognos Command Center has addressed vulnerabilities IBM® Semeru Java™ Version 11, Apache ActiveMQ and Microsoft .Net MVC Framework for ASP.Net

Summary There are vulnerabilities in IBM® Semeru Java™ Version 11, Apache ActiveMQ and Microsoft .Net MVC Framework for ASP.Net used by IBM Cognos Command Center. IBM Cognos Command Center 10.2.5 IF1 has addressed the applicable CVEs by upgrading to non-vulnerable versions of these libraries...

[R2] Tenable Identity Exposure Version 3.59.4 Fixes Multiple Vulnerabilities

R2 Tenable Identity Exposure Version 3.59.4 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 02/21/2024 - 13:26 Tenable Identity Exposure leverages third-party software to help provide underlying functionality. One of the third-party components ASP.NET Core was found to contain vulnerabilities, a...

Denial Of Service (DOS)

ASP.NET Core is vulnerable to a Denial of Service DoS. The vulnerability is due to improper handling of certain SignalR requests which results in the server being overwhelmed unresponsive, resulting in Denial of Service DoS...

.NET Core DoS Vulnerability (Feb 2024) - Windows

.NET Core is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Security Update for Microsoft ASP.NET Core (February 2024) (CVE-2024-21386)

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a denial of service as referenced in the vendor advisory. - ASP.NET Core Denial of Service Vulnerability Note that Nessus has not tested for these issues but has instead relied onl...