asp.net vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv3

A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party claims that the issue is that the TextEncoder.EncodeCore function in the System.Text.Encodings.Web package in ASP.NET Core Mvc ...

Microsoft Asp.net Model View Controller 1.1.0 Microsoft Asp.net Model View Controller 1.1.1 Microsoft Asp.net Model View Controller 1.1.2 Microsoft Microsoft.aspnetcore.mvc.abstractions 1.0.0 Microsoft Microsoft.aspnetcore.mvc.apiexplorer 1.1.2 Microsoft Asp.net Model View Controller 1.0.0 Microsoft Asp.net Model View Controller 1.0.1 Microsoft Asp.net Model View Controller 1.0.2 Microsoft Microsoft.aspnetcore.mvc.dataannotations 1.0.2 Microsoft Microsoft.aspnetcore.mvc.dataannotations 1.0.3 Microsoft Microsoft.aspnetcore.mvc.dataannotations 1.1.0 Microsoft Microsoft.aspnetcore.mvc.dataannotations 1.1.1 Microsoft Microsoft.aspnetcore.mvc.formatters.xml 1.1.1 Microsoft Microsoft.aspnetcore.mvc.formatters.xml 1.1.2 Microsoft Microsoft.aspnetcore.mvc.localization 1.0.0 Microsoft Microsoft.aspnetcore.mvc.localization 1.0.1 Microsoft Microsoft.aspnetcore.mvc.razor.host 1.0.0 Microsoft Microsoft.aspnetcore.mvc.razor.host 1.0.1 Microsoft Microsoft.aspnetcore.mvc.razor.host 1.0.2 Microsoft Microsoft.aspnetcore.mvc.razor.host 1.0.3 Microsoft Microsoft.aspnetcore.mvc.razor.host 1.1.0 Microsoft Microsoft.aspnetcore.mvc.viewfeatures 1.0.3

1 Github repository

5.3

CVSSv3

A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.

Microsoft Asp.net Model View Controller 1.0.0 Microsoft Asp.net Model View Controller 1.0.2 Microsoft Microsoft.aspnetcore.mvc.abstractions 1.0.0 Microsoft Microsoft.aspnetcore.mvc.abstractions 1.0.2 Microsoft Microsoft.aspnetcore.mvc.abstractions 1.1.0 Microsoft Microsoft.aspnetcore.mvc.apiexplorer 1.0.2 Microsoft Microsoft.aspnetcore.mvc.apiexplorer 1.1.0 Microsoft Asp.net Model View Controller 1.1.0 Microsoft Asp.net Model View Controller 1.1.2 Microsoft Microsoft.aspnetcore.mvc.abstractions 1.1.1 Microsoft Microsoft.aspnetcore.mvc.abstractions 1.1.2 Microsoft Microsoft.aspnetcore.mvc.apiexplorer 1.0.0 Microsoft Microsoft.aspnetcore.mvc.apiexplorer 1.0.1 Microsoft Microsoft.aspnetcore.mvc.cors 1.0.0 Microsoft Microsoft.aspnetcore.mvc.cors 1.0.1 Microsoft Microsoft.aspnetcore.mvc.cors 1.0.2 Microsoft Microsoft.aspnetcore.mvc.cors 1.0.3 Microsoft Microsoft.aspnetcore.mvc.formatters.json 1.0.3 Microsoft Microsoft.aspnetcore.mvc.formatters.json 1.1.0 Microsoft Microsoft.aspnetcore.mvc.formatters.json 1.1.1 Microsoft Microsoft.aspnetcore.mvc.formatters.json 1.1.2 Microsoft Microsoft.aspnetcore.mvc.localization 1.1.2

2 Github repositories

NA

Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Services (IIS), provides detailed error codes during decryption attempts, which allows remote malicious users to decrypt and modify encrypted Vie...

Microsoft .net Framework 1.1 Microsoft .net Framework 2.0 Microsoft .net Framework 3.5 Microsoft .net Framework 3.5.1 Microsoft .net Framework 4.0

3 EDB exploits1 Github repository

NA

The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 allows remote authenticated users to obtain access to arbitrary user accounts via a crafted username, aka "ASP.Net Forms Authentication Bypass Vuln...

Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Xp Sp3 Microsoft Windows 7 -Microsoft Windows Server 2008 -Microsoft Windows Xp Microsoft Windows Server 2003 Microsoft Windows Vista -Microsoft Windows Vista

NA

Buffer overflow in ASP.NET Worker Process allows remote malicious users to cause a denial of service (restart) and possibly execute arbitrary code via a routine that processes cookies while in StateServer mode.

Microsoft .net Framework 1.0

7.5

CVSSv3

<p>A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.</p> <p>The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious malicious user to set a second cookie with the name...

Microsoft Asp.net Core Fedoraproject Fedora 32 Fedoraproject Fedora 33 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux Eus 8.2 Redhat Enterprise Linux Aus 8.2 Redhat Enterprise Linux Tus 8.2 Redhat Enterprise Linux Aus 8.4 Redhat Enterprise Linux Tus 8.4 Redhat Enterprise Linux Eus 8.4 Redhat Enterprise Linux Eus 8.6 Redhat Enterprise Linux Tus 8.6 Redhat Enterprise Linux Aus 8.6

NA

Directory traversal vulnerability in the File Manager component in DevExpress ASPxFileManager Control for ASP.NET WebForms and MVC prior to 13.1.10 and 13.2.x prior to 13.2.9 allows remote authenticated users to read or write arbitrary files via a .. (dot dot) in the __EVENTARGUM...

Devexpress Aspxfilemanager Control For Webforms And Mvc 10.2.3 Devexpress Aspxfilemanager Control For Webforms And Mvc 11.1.12 Devexpress Aspxfilemanager Control For Webforms And Mvc 11.1.5 Devexpress Aspxfilemanager Control For Webforms And Mvc 11.1.4 Devexpress Aspxfilemanager Control For Webforms And Mvc 11.2.7 Devexpress Aspxfilemanager Control For Webforms And Mvc 11.2.5 Devexpress Aspxfilemanager Control For Webforms And Mvc 12.1.12 Devexpress Aspxfilemanager Control For Webforms And Mvc 10.2.8 Devexpress Aspxfilemanager Control For Webforms And Mvc 10.2.6 Devexpress Aspxfilemanager Control For Webforms And Mvc 11.1.9 Devexpress Aspxfilemanager Control For Webforms And Mvc 11.1.8 Devexpress Aspxfilemanager Control For Webforms And Mvc 11.2.12 Devexpress Aspxfilemanager Control For Webforms And Mvc 11.2.11 Devexpress Aspxfilemanager Control For Webforms And Mvc 10.2.5 Devexpress Aspxfilemanager Control For Webforms And Mvc 10.2.4 Devexpress Aspxfilemanager Control For Webforms And Mvc 11.1.7 Devexpress Aspxfilemanager Control For Webforms And Mvc 11.1.6 Devexpress Aspxfilemanager Control For Webforms And Mvc 11.2.10 Devexpress Aspxfilemanager Control For Webforms And Mvc 11.2.8 Devexpress Aspxfilemanager Control For Webforms And Mvc 12.1.7 Devexpress Aspxfilemanager Control For Webforms And Mvc 12.1.6 Devexpress Aspxfilemanager Control For Webforms And Mvc 12.2.11

1 EDB exploit

5.9

CVSSv3

ASP.NET Denial of Service Vulnerability

Microsoft Visual Studio 2019 Microsoft Visual Studio 2019 8.10 Microsoft .net Microsoft .net Core Fedoraproject Fedora 33 Fedoraproject Fedora 34

NA

ASP.NET in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2, when the customErrors configuration is disabled, allows remote malicious users to obtain sensitive configuration-file information via a crafted request, aka "ASP.NET Information Discl...

Microsoft .net Framework 3.5.1 Microsoft .net Framework 3.5 Microsoft .net Framework 4.5.1 Microsoft .net Framework 4.5.2 Microsoft .net Framework 1.1 Microsoft .net Framework 2.0 Microsoft .net Framework 4.0 Microsoft .net Framework 4.5

8.8

CVSSv3

ASP.NET Elevation of Privilege Vulnerability

Microsoft .net Framework 4.8 Microsoft .net Framework 4.6.2 Microsoft .net Framework 4.7 Microsoft .net Framework 4.7.1 Microsoft .net Framework 4.7.2 Microsoft .net Framework 3.5 Microsoft .net Framework 4.8.1 Microsoft .net Framework 2.0

1 Github repository

Get Started

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook