Microsoft .Net Core
14 CVEs affecting Microsoft .Net Core. Latest disclosed: 2020-07-14. Critical: 0, High: 11.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-0606 | High | 8.8 | 2020-01-14 | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploit… |
CVE-2020-0605 | High | 8.8 | 2020-01-14 | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploit… |
CVE-2020-1147 | High | 7.8 | 2020-07-14 | A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of X… |
CVE-2020-1108 | High | 7.5 | 2020-05-21 | A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Core & .NET Framework Denial of Service Vu… |
CVE-2019-1301 | High | 7.5 | 2019-09-11 | A denial of service vulnerability exists when .NET Core improperly handles web requests, aka '.NET Core Denial of Service Vulnerability'. |
CVE-2019-0981 | High | 7.5 | 2019-05-16 | A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service V… |
CVE-2019-0980 | High | 7.5 | 2019-05-16 | A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service V… |
CVE-2019-0820 | High | 7.5 | 2019-05-16 | A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Servic… |
CVE-2019-0545 | High | 7.5 | 2019-01-08 | An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka… |
CVE-2018-8292 | High | 7.5 | 2018-10-10 | An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information… |
CVE-2018-8409 | High | 7.5 | 2018-09-13 | A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET C… |
CVE-2018-8416 | Medium | 6.5 | 2018-11-14 | A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1. |
CVE-2019-0657 | Medium | 5.9 | 2019-03-05 | A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerabil… |
CVE-2018-8356 | Medium | 5.5 | 2018-07-11 | A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Fe… |