Lucene search

K
MicrosoftAsp.net Core

35 matches found

CVE
CVE
added 2023/10/10 2:15 p.m.4408 views

CVE-2023-44487

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

7.5CVSS8AI score0.94434EPSS
CVE
CVE
added 2023/08/08 7:15 p.m.708 views

CVE-2023-38180

.NET and Visual Studio Denial of Service Vulnerability

7.5CVSS7.8AI score0.00133EPSS
CVE
CVE
added 2018/07/11 12:29 a.m.644 views

CVE-2018-8171

A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MVC 5.2.

7.5CVSS7.3AI score0.11501EPSS
CVE
CVE
added 2024/02/13 6:15 p.m.313 views

CVE-2024-21386

.NET Denial of Service Vulnerability

7.5CVSS7.7AI score0.01655EPSS
CVE
CVE
added 2024/02/13 6:15 p.m.272 views

CVE-2024-21404

.NET Denial of Service Vulnerability

7.5CVSS7.7AI score0.03703EPSS
CVE
CVE
added 2023/11/14 10:15 p.m.214 views

CVE-2023-36558

ASP.NET Core Security Feature Bypass Vulnerability

6.2CVSS7.5AI score0.00405EPSS
CVE
CVE
added 2020/01/14 11:15 p.m.201 views

CVE-2020-0603

A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka 'ASP.NET Core Remote Code Execution Vulnerability'.

9.3CVSS8.8AI score0.14767EPSS
CVE
CVE
added 2023/11/14 10:15 p.m.182 views

CVE-2023-36038

ASP.NET Core Denial of Service Vulnerability

8.2CVSS7.7AI score0.07364EPSS
CVE
CVE
added 2021/08/12 6:15 p.m.169 views

CVE-2021-34532

ASP.NET Core and Visual Studio Information Disclosure Vulnerability

5.5CVSS6.2AI score0.00368EPSS
CVE
CVE
added 2020/09/11 5:15 p.m.167 views

CVE-2020-1045

<p>A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.</p><p>The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded.</p><p>The security u...

7.5CVSS7.3AI score0.17328EPSS
CVE
CVE
added 2020/01/14 11:15 p.m.165 views

CVE-2020-0602

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

7.5CVSS7.6AI score0.0413EPSS
CVE
CVE
added 2021/01/12 8:15 p.m.162 views

CVE-2021-1723

ASP.NET Core and Visual Studio Denial of Service Vulnerability

7.5CVSS7.3AI score0.03386EPSS
CVE
CVE
added 2019/01/08 9:29 p.m.141 views

CVE-2019-0548

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.2, ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0564.

7.5CVSS7.1AI score0.04581EPSS
CVE
CVE
added 2020/08/17 7:15 p.m.139 views

CVE-2020-1597

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication.A remote...

7.5CVSS7.3AI score0.08489EPSS
CVE
CVE
added 2023/08/08 7:15 p.m.139 views

CVE-2023-35391

ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

7.5CVSS6.5AI score0.02242EPSS
CVE
CVE
added 2025/03/11 5:16 p.m.136 views

CVE-2025-24070

Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network.

7CVSS6.9AI score0.00108EPSS
CVE
CVE
added 2018/10/10 1:29 p.m.130 views

CVE-2018-8292

An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core 6.0.

7.5CVSS7AI score0.03238EPSS
CVE
CVE
added 2018/03/14 5:29 p.m.119 views

CVE-2018-0787

ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how web applications that are created from templates validate web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability".

8.8CVSS8.6AI score0.11343EPSS
CVE
CVE
added 2018/11/14 1:29 a.m.112 views

CVE-2018-8416

A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1.

6.5CVSS6.4AI score0.01981EPSS
CVE
CVE
added 2019/09/11 10:15 p.m.111 views

CVE-2019-1302

An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests, aka 'ASP.NET Core Elevation Of Privilege Vulnerability'.

8.8CVSS8.4AI score0.09908EPSS
CVE
CVE
added 2018/07/11 12:29 a.m.110 views

CVE-2018-8356

A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2...

5.5CVSS6.3AI score0.00356EPSS
CVE
CVE
added 2020/05/21 11:15 p.m.110 views

CVE-2020-1161

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

7.5CVSS7.3AI score0.03721EPSS
CVE
CVE
added 2018/09/13 12:29 a.m.109 views

CVE-2018-8409

A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1.

7.5CVSS7.2AI score0.07554EPSS
CVE
CVE
added 2021/12/15 3:15 p.m.108 views

CVE-2021-43877

ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

8.8CVSS8.1AI score0.00732EPSS
CVE
CVE
added 2019/01/08 9:29 p.m.99 views

CVE-2019-0564

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548.

7.5CVSS7.1AI score0.04581EPSS
CVE
CVE
added 2018/03/14 5:29 p.m.92 views

CVE-2018-0875

.NET Core 1.0, .NET Core 1.1, NET Core 2.0 and PowerShell Core 6.0.0 allow a denial of Service vulnerability due to how specially crafted requests are handled, aka ".NET Core Denial of Service Vulnerability".

7.5CVSS7.2AI score0.17769EPSS
CVE
CVE
added 2019/05/16 7:29 p.m.91 views

CVE-2019-0982

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

7.5CVSS7.2AI score0.04508EPSS
CVE
CVE
added 2019/07/15 7:15 p.m.85 views

CVE-2019-1075

A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'.

6.1CVSS6.1AI score0.005EPSS
CVE
CVE
added 2017/11/15 3:29 a.m.83 views

CVE-2017-11879

ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core Elevation Of Privilege Vulnerability".

8.8CVSS8.4AI score0.0572EPSS
CVE
CVE
added 2018/03/14 5:29 p.m.80 views

CVE-2018-0808

ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how ASP.NET web applications handle web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0784.

7.5CVSS7.9AI score0.09877EPSS
CVE
CVE
added 2019/04/09 9:29 p.m.79 views

CVE-2019-0815

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

7.5CVSS6.1AI score0.0614EPSS
CVE
CVE
added 2025/04/08 6:15 p.m.76 views

CVE-2025-26682

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

7.5CVSS7AI score0.12218EPSS
CVE
CVE
added 2017/11/15 3:29 a.m.75 views

CVE-2017-8700

ASP.NET Core 1.0, 1.1, and 2.0 allow an attacker to bypass Cross-origin Resource Sharing (CORS) configurations and retrieve normally restricted content from a web application, aka "ASP.NET Core Information Disclosure Vulnerability".

7.5CVSS7.2AI score0.21427EPSS
CVE
CVE
added 2018/01/10 1:29 a.m.63 views

CVE-2018-0784

ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0808.

8.8CVSS7.9AI score0.09877EPSS
CVE
CVE
added 2018/01/10 1:29 a.m.55 views

CVE-2018-0785

ASP.NET Core 1.0. 1.1, and 2.0 allow a cross site request forgery vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core Cross Site Request Forgery Vulnerability".

6.5CVSS7.3AI score0.01924EPSS