Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Asp.net
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-1364 1 Microsoft 1 Asp.net 2018-10-18 7.8 HIGH 7.5 HIGH
Microsoft w3wp (aka w3wp.exe) does not properly handle when the AspCompat directive is not used when referencing COM components in ASP.NET, which allows remote attackers to cause a denial of service (resource consumption or crash) by repeatedly requesting each of several documents that refer to COM components, or are restricted documents located under the ASP.NET application path.