Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

18 records

Priority HIGH 66

.NET Core Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.30096 Published 2021-02-25 Fixed in publication, 4.5.1 +2
Priority MEDIUM 42

A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06462 Published 2020-05-21 Fixed in publication, 2.1.18 +1
Priority LOW 21

A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement, aka 'Windows Defender Application Control Security Feature Bypass Vu…

CVSS 3.0MEDIUM 4.1 Local High privileges No interaction EPSS 0.011 Published 2019-07-19 Fixed in 6.2.2, 6.1.5
Priority LOW 34

A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.04555 Published 2019-03-06 Partial fix · 2.2.2, 2.1.8 +1 CWE-20
TI-2018-06098 CVE-2018-8415 · GHSA-69m5-86x3-v3m5

Code injection in Microsoft Windows 7

Priority LOW 36

A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code, aka "Microsoft PowerShell Tampering Vulnerability." This affects Windows 7, PowerShell Core 6.1, Windows Server 2012 R…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.01185 Published 2018-11-14 No fix listed CWE-94
Priority MEDIUM 48

An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET C…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.14833 Published 2018-10-10 Partial fix · 4.3.4 CWE-200
Priority LOW 26

A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework 4.7.…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00748 Published 2018-07-11 Partial fix · 4.1.3, 4.3.3 +3 CWE-295
Priority LOW 39

Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, .NET Core 1.0 and 2.0, and PowerShell Core 6.0.0 allow a security feature bypass vulnerability due to the way certificates are…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03687 Published 2018-01-10 Fixed in 5.2.4, 5.3.5 +6 CWE-295