Microsoft Asp.net
10 CVEs affecting Microsoft Asp.net. Latest disclosed: 2018-07-11. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2004-0847 | Critical | 9.8 | 2004-11-03 | The Microsoft .NET forms authentication capability for ASP.NET allows remote attackers to bypass authentication for .aspx files in restricted directories via a… |
CVE-2018-8171 | High | 7.5 | 2018-07-11 | A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vu… |
CVE-2006-1364 | High | 7.5 | 2006-03-23 | Microsoft w3wp (aka w3wp.exe) does not properly handle when the AspCompat directive is not used when referencing COM components in ASP.NET, which allows remote… |
CVE-2010-2088 | | 2010-05-27 | ASP.NET in Microsoft .NET 3.5 does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting (XSS) attacks a… | |
CVE-2010-2084 | | 2010-05-27 | Microsoft ASP.NET 2.0 does not prevent setting the InnerHtml property on a control that inherits from HtmlContainerControl, which allows remote attackers to co… | |
CVE-2005-2224 | | 2005-07-12 | aspnet_wp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a crafted SOAP me… | |
CVE-2005-1665 | | 2005-05-18 | The __VIEWSTATE functionality in Microsoft ASP.NET 1.x, when not cryptographically signed, allows remote attackers to cause a denial of service (CPU consumptio… | |
CVE-2005-1664 | | 2005-05-18 | The __VIEWSTATE functionality in Microsoft ASP.NET 1.x allows remote attackers to conduct replay attacks to (1) apply a ViewState generated from one view to a… | |
CVE-2005-0452 | | 2005-02-16 | Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attackers to inject arbitrary HTML or web scrip… | |
CVE-2003-0768 | | 2003-09-22 | Microsoft ASP.Net 1.1 allows remote attackers to bypass the Cross-Site Scripting (XSS) and Script Injection protection feature via a null character in the begi… |