Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

microsoft asp.net core 3.0 vulnerabilities and exploits

(subscribe to this query)
8.8
CVSSv3
CVE-2019-1302
An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests, aka 'ASP.NET Core Elevation Of Privilege Vulnerability'.
Microsoft Asp.net Core 2.1Microsoft Asp.net Core 3.0Microsoft Asp.net Core 2.2
8.8
CVSSv3
CVE-2020-0603
A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka 'ASP.NET Core Remote Code Execu...
Microsoft Asp.net Core 2.1Microsoft Asp.net Core 3.0Microsoft Asp.net Core 3.1Redhat Enterprise Linux 8.0Redhat Enterprise Linux Eus 8.1
7.5
CVSSv3
CVE-2020-0602
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.
Microsoft Asp.net Core 2.1Microsoft Asp.net Core 3.0Microsoft Asp.net Core 3.1Redhat Enterprise Linux 8.0Redhat Enterprise Linux Eus 8.1
5.5
CVSSv3
CVE-2018-8356
A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 3.0, Microsoft .NET Fr...
Microsoft .net Framework 3.0Microsoft .net Framework 3.5Microsoft .net Framework 3.5.1Microsoft .net Framework 4.5.2Microsoft .net Framework 4.6Microsoft .net Framework 4.6.2Microsoft .net Framework 4.7Microsoft .net Framework 4.7.1Microsoft .net Framework 4.7.2Microsoft .net Framework 4.6.1Microsoft Powershell Core 6.1Microsoft Powershell Core 6.0Microsoft .net Core 2.0Microsoft .net Core 1.0Microsoft .net Core 1.1Microsoft .net Framework Developer Pack 4.7.2Microsoft Asp.net Core 1.0Microsoft Asp.net Core 1.1Microsoft Asp.net Core 2.0
7.5
CVSSv3
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Ietf Http 2.0Nghttp2 Nghttp2Netty NettyEnvoyproxy Envoy 1.27.0Envoyproxy Envoy 1.26.4Envoyproxy Envoy 1.25.9Envoyproxy Envoy 1.24.10Eclipse JettyCaddyserver CaddyGolang Http2Golang GoGolang NetworkingF5 Big-ip AnalyticsF5 Big-ip Policy Enforcement ManagerF5 Big-ip Local Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Global Traffic ManagerF5 Big-ip Fraud Protection ServiceF5 Big-ip Domain Name SystemF5 Big-ip Application Security ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Advanced Firewall Manager
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook