October 15, 2019-KB4519572 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1803

None None...

dotnet: infinite loop in Uri.TryCreate leading to ASP.Net Core Denial of Service

A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981...

dotnet: infinite loop in Uri.TryCreate leading to ASP.Net Core Denial of Service

A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981...

The vulnerability of the ASP.NET Core software platform, related to errors in handling web requests, allows attackers to cause service failures.

The vulnerability of the ASP.NET Core software platform is related to errors in handling web requests. Exploiting this vulnerability can allow an attacker to cause service interruptions through specially crafted web requests...

The vulnerability of the System.IO.Pipelines library in .NET Core and ASP.NET Core programming frameworks allows attackers to induce service interruptions.

The vulnerability of the System.IO.Pipelines library in .NET Core and ASP.NET Core applications is related to request processing errors. Exploiting this vulnerability allows an attacker to cause service failures through a specially crafted request...

CVE-2018-8409

A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1...

PT-2018-1582 · Microsoft · Net Core +2

Name of the Vulnerable Software and Affected Versions: .NET Core versions 2.1 ASP.NET Core versions 2.1 System.IO.Pipelines affected versions not specified Description: A denial of service issue exists due to improper handling of requests by System.IO.Pipelines. This can be exploited by a remote...

ASP.NET Core/.NET Core SDK Detection (Windows SMB Login)

Detects the installed version of ASP.NET Core. The script logs in via smb, searches for SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft ASP.NET Core Cross-Site Request Forgery Vulnerability

Microsoft ASP.NET Core is a cross-platform open source framework from Microsoft Corporation USA. The framework is used to build cloud-based applications such as web applications, IoT applications, and mobile backends. A cross-site request forgery vulnerability exists in Microsoft ASP.NET Core...

Security Update ASP .NET Core September 2017

The remote Windows host has an installation of ASP.NET Core runtime package store with a version less than 2.0.12219.0. Therefore the host is affected by multiple vulnerabilities : - An open redirect vulnerability that can lead to an escalation of privilege. CVE-2017-11879 - A flaw that is...

Microsoft ASP .NET Core for Windows

Binary data microsoftaspdotnetcorewin.nbin...

CVE-2017-11357

Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code...

CVE-2017-9140

Cross-site scripting XSS vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms Report Viewer control before R1 2017 SP2 11.0.17.406 allows remote attackers to inject arbitrary web script or HTML via the bgColor parameter to Telerik.ReportViewer.axd...

CVE-2017-9140

The CVE-2017-9140 issue affects Telerik Reporting for ASP.NET WebForms (Telerik.ReportViewer.WebForms.dll) prior to R1 2017 SP2 (11.0.17.406). It is a reflected XSS vulnerability exploitable via the bgColor parameter to Telerik.ReportViewer.axd, allowing attacker-controlled script/HTML execution ...

CVE-2017-0249

An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests...

CVE-2017-0256

A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests...

The vulnerability in Microsoft.NET Framework software allows a malicious attacker to compromise the accessibility of protected information.

Vulnerability exists in Microsoft ASP.NET, allowing attackers to cause server failures in ASP.NET applications...

LebiShop Mall Backend Arbitrary File Write Vulnerability

LebiShop mall system is an online mall system using ASP.NET language. The system is widely used in small and medium-sized e-commerce enterprises. The mall system's management background provides a system template file editing function, the function of the page file parameters have not been strict...

Microsoft ASP.NET Cross-Site Request Forgery Vulnerability

Microsoft ASP.NET, part of .NET FrameWork, is a Microsoft technology that is a server-side scripting technology that enables scripts embedded in Web pages to be executed by Internet servers. Microsoft ASP.NET suffers from a cross-site request forgery vulnerability that could allow a remote attack...

we7cms directory traversal vulnerability

we7cms is a content management system based on asp.net development. The we7cms V3.0 system has multiple directory traversal vulnerabilities that can be exploited by attackers to obtain sensitive information through database initialization and table building statements...