Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Asp.net Core
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-34532 1 Microsoft 2 Asp.net Core, Visual Studio 2019 2023-12-28 2.1 LOW 5.5 MEDIUM
ASP.NET Core and Visual Studio Information Disclosure Vulnerability
CVE-2023-36558 1 Microsoft 3 .net, Asp.net Core, Visual Studio 2022 2023-11-21 N/A 5.5 MEDIUM
ASP.NET Core - Security Feature Bypass Vulnerability
CVE-2018-8356 1 Microsoft 13 .net Core, .net Framework, .net Framework Developer Pack and 10 more 2022-05-23 2.1 LOW 5.5 MEDIUM
A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, ASP.NET Core 1.1, Microsoft .NET Framework 4.5.2, ASP.NET Core 2.0, ASP.NET Core 1.0, .NET Core 1.1, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET Core 1.0, .NET Core 2.0, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 4.7.2.
CVE-2018-8416 1 Microsoft 1 Asp.net Core 2020-08-24 4.0 MEDIUM 6.5 MEDIUM
A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1.
CVE-2019-1075 1 Microsoft 1 Asp.net Core 2019-07-19 5.8 MEDIUM 6.1 MEDIUM
A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'.
CVE-2018-0785 1 Microsoft 1 Asp.net Core 2018-02-01 4.3 MEDIUM 6.5 MEDIUM
ASP.NET Core 1.0. 1.1, and 2.0 allow a cross site request forgery vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core Cross Site Request Forgery Vulnerability".