Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

32 records

Vendor: Microsoft Component: .net Core Clear all filters
TI-2022-15528 CVE-2022-34716 · GHSA-vh55-786g-wjwj

.NET Spoofing Vulnerability

Priority LOW 31

.NET Spoofing Vulnerability

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.02498 Published 2022-08-09 Fixed in 15.9.50, 17.2.7 +9 CWE-290
TI-2021-08380 CVE-2021-26701 · GHSA-ghhp-997w-qr28

.NET Core Remote Code Execution Vulnerability

Priority HIGH 66

.NET Core Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.30096 Published 2021-02-25 Fixed in publication, 4.5.1 +2
TI-2021-06407 CVE-2021-24112 · GHSA-rxg9-xrhp-64gj

.NET Core Remote Code Execution Vulnerability

Priority MEDIUM 55

.NET Core Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03454 Published 2021-02-25 Fixed in publication, 4.7.2 +1 CWE-94
TI-2020-07165 CVE-2020-8927 · GHSA-5v8v-66v8-mwm7

Buffer overflow in Brotli library

Priority MEDIUM 41

A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.03217 Published 2020-09-15 Fixed in 1.0.9, 3.1.23 +3 CWE-130
TI-2020-01112 CVE-2020-1147 · GHSA-g5vf-38cp-4px9

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and…

Priority CRITICAL 93KEV

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Vi…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.95804 Published 2020-07-14 Fixed in 2.1.20, 3.1.6
TI-2020-01075 CVE-2020-1108 · GHSA-3w5p-jhp5-c29q

.NET Core & .NET Framework Denial of Service Vulnerability

Priority MEDIUM 42

A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06462 Published 2020-05-21 Fixed in publication, 2.1.18 +1
TI-2020-00583 CVE-2020-0606 · GHSA-r4mw-gxf7-vxr9

Improper input validation in Microsoft .NET Core

Priority MEDIUM 56

A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.18343 Published 2020-01-14 Fixed in 3.0.2, 3.1.1 +1 CWE-20
TI-2020-00582 CVE-2020-0605 · GHSA-f3wx-45hf-3hwx

Improper input validation in Microsoft .NET Core

Priority MEDIUM 56

A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.18399 Published 2020-01-14 No fix listed CWE-20
TI-2019-00581 CVE-2019-0820 · GHSA-cmhx-cq75-c4mj

Uncontrolled resource consumption in Microsoft .NET Framework 4.5.2

Priority MEDIUM 41

A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05719 Published 2019-05-16 Fixed in 4.3.1 CWE-400
Load more