Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 66

Export CSV
CVE-2019-0548

Core: AspNetCoreModule WebSocket DOS

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.2, ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0564.

CVSS 3.0 · 7.5 High EPSS 8.2% KEV · Not listed
Vendors
Microsoft Redhat
Products
Asp.net Core Rhel Dotnet
CVE-2019-0545

Core: NCL - SocketsHttpHandler mishandling 1xx response as a final response leads to info disclosure

An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7/4.7.1/4.7.2, .NET Core 2.1, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET Core 2.2, Microsoft .NET Framework 4.7.2.

CVSS 3.0 · 7.5 High EPSS 9.6% KEV · Not listed
Vendors
Microsoft Redhat
Products
.net Core .net Framework Windows 10 and 9 more
CVE-2018-8416

Core: Arbitrary file and directory creation

A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1.

CVSS 3.0 · 6.5 Medium EPSS 7.3% KEV · Not listed
Vendors
Microsoft Redhat
Products
Asp.net Core Rhel Dotnet
CVE-2018-8292

Core: information disclosure due to authentication information exposed in a redirect

An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core 6.0.

CVSS 3.0 · 7.5 High EPSS 14.8% KEV · Not listed
Vendors
Microsoft Redhat
Products
Asp.net Core Powershell Core Rhel Dotnet
CVE-2018-0875

Core: Hash Collision Denial of Service

.NET Core 1.0, .NET Core 1.1, NET Core 2.0 and PowerShell Core 6.0.0 allow a denial of Service vulnerability due to how specially crafted requests are handled, aka ".NET Core Denial of Service Vulnerability".

CVSS 3.0 · 7.5 High EPSS 9.2% KEV · Not listed
Vendors
Microsoft Redhat
Products
Asp.net Core Powershell Core Rhel Dotnet
CVE-2018-0764

Core: Improper processing of XML documents can cause a denial of service

Microsoft .NET Framework 1.1, 2.0, 3.0, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 5.7 and .NET Core 1.0. 1.1 and 2.0 allow a denial of service vulnerability due to the way XML documents are processed, aka ".NET and .NET Core Denial Of Service Vulnerability". This CVE is unique from CVE-2018-0765.

CVSS 3.0 · 7.5 High EPSS 8.9% KEV · Not listed
Vendors
Microsoft Redhat
Products
.net Core .net Framework Powershell Core and 8 more