Microsoft Asp.net_model_view_controller
5 CVEs affecting Microsoft Asp.net_model_view_controller. Latest disclosed: 2018-07-11. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-8171 | High | 7.5 | 2018-07-11 | A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vu… |
CVE-2017-0247 | High | 7.5 | 2017-05-12 | A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party claims… |
CVE-2017-0249 | High | 7.3 | 2017-05-12 | An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests. |
CVE-2017-0256 | Medium | 5.3 | 2017-05-12 | A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests. |
CVE-2014-4075 | | 2014-10-15 | Cross-site scripting (XSS) vulnerability in System.Web.Mvc.dll in Microsoft ASP.NET Model View Controller (MVC) 2.0 through 5.1 allows remote attackers to inje… |