Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Microsoft ASP.NET Core — RHSA-2020:0130 Clear all filters
TI-2020-00580 CVE-2020-0603 · GHSA-655q-9gvg-q4cm

Out-of-bounds write in Microsoft ASP.NET Core

Priority MEDIUM 58

A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context o…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.22561 Published 2020-01-14 Fixed in 2.1.15, 3.1.1 +2 CWE-787
TI-2020-00579 CVE-2020-0602 · GHSA-23cv-jh4v-vffm

Uncontrolled resource consumption in Microsoft ASP.NET Core

Priority MEDIUM 44

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.08147 Published 2020-01-14 Fixed in 2.1.15, 3.1.1 +2 CWE-400