Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 66

Export CSV
CVE-2017-11770

Core: DoS via bad certificate

.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of service vulnerability exists when .NET Core improperly handles parsing certificate data, aka ".NET CORE Denial Of Service Vulnerability".

CVSS 3.0 · 7.5 High EPSS 5.4% KEV · Not listed
Vendors
Microsoft Redhat
Products
Aspnetcore Rhel Dotnet
CVE-2017-8585

Core: DoS via invalid culture

Microsoft .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7 allow an attacker to send specially crafted requests to a .NET web application, resulting in denial of service, aka .NET Denial of Service Vulnerability.

CVSS 3.0 · 7.5 High EPSS 9.5% KEV · Not listed
Vendors
Microsoft Redhat
Products
.net Framework Rhel Dotnet
CVE-2020-0603

dotnet: Memory Corruption in SignalR

A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka 'ASP.NET Core Remote Code Execution Vulnerability'.

CVSS 3.1 · 8.8 High EPSS 22.6% KEV · Not listed
Vendors
Microsoft Redhat
Products
Asp.net Core Enterprise Linux Enterprise Linux Eus and 1 more
CVE-2019-0981

dotnet: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service

A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0980.

CVSS 3.0 · 7.5 High EPSS 5.0% KEV · Not listed
Vendors
Microsoft Redhat
Products
.net Core .net Framework Windows 10 and 9 more
CVE-2019-0980

dotnet: infinite loop in Uri.TryCreate leading to ASP.Net Core Denial of Service

A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981.

CVSS 3.0 · 7.5 High EPSS 5.0% KEV · Not listed
Vendors
Microsoft Redhat
Products
.net Core .net Framework Windows 10 and 9 more
CVE-2019-0820

dotnet: timeouts for regular expressions are not enforced

A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.

CVSS 3.1 · 7.5 High EPSS 5.7% KEV · Not listed
Vendors
Microsoft Redhat
Products
.net Core .net Framework Windows 10 and 12 more
CVE-2019-0757

dotnet: NuGet Tampering Vulnerability

A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'.

CVSS 3.1 · 6.5 Medium EPSS 2.7% KEV · Not listed
Vendors
Apple Microsoft Mono-project and 1 more
Products
Macos .net Core .net Core Sdk and 8 more
CVE-2019-0657

dotnet: Domain-spoofing attack in System.Uri

A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.

CVSS 3.0 · 5.9 Medium EPSS 4.6% KEV · Not listed
Vendors
Microsoft Redhat
Products
.net Core .net Framework Powershell Core and 10 more
CVE-2019-0564

Core: Kestrel - WebSocket DoS via CancellationToken (CoreFX and ASP.NET)

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548.

CVSS 3.0 · 7.5 High EPSS 8.4% KEV · Not listed
Vendors
Microsoft Redhat
Products
Asp.net Core Rhel Dotnet