CVSS: 7.5EPSS: 6%CPEs: 1EXPL: 0CVE-2019-0815
https://notcve.org/view.php?id=CVE-2019-0815
09 Apr 2019 — A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'. Se presenta una vulnerabilidad de denegación de servicio cuando ASP.NET Core maneja inapropiadamente las peticiones web, también se conoce como "ASP.NET Core Denial of Service Vulnerability". • http://www.securityfocus.com/bid/107701 • CWE-19: Data Processing Errors •
CVSS: 7.8EPSS: 4%CPEs: 26EXPL: 0CVE-2019-0757 – dotnet: NuGet Tampering Vulnerability
https://notcve.org/view.php?id=CVE-2019-0757
13 Mar 2019 — A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'. Existe una vulnerabilidad de manipulación en NuGet Package Manager para Linux y Mac que podría permitir que un atacante autenticado modifique la estructura de carpetas de un paquete de NuGet, también conocida como 'NuGet Package Manager Tampering Vulnerability'. A flaw was found in dotnet.... • https://access.redhat.com/errata/RHSA-2019:1259 • CWE-732: Incorrect Permission Assignment for Critical Resource •
CVSS: 9.3EPSS: 19%CPEs: 66EXPL: 0CVE-2019-0613
https://notcve.org/view.php?id=CVE-2019-0613
05 Mar 2019 — A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework and Visual Studio Remote Code Execution Vulnerability'. Existe una vulnerabilidad de ejecución remota de código en el software de .NET Framework y en Visual Studio cuando el software no comprueba correctamente el marcado de... • http://www.securityfocus.com/bid/106872 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 2%CPEs: 72EXPL: 0CVE-2019-0657 – dotnet: Domain-spoofing attack in System.Uri
https://notcve.org/view.php?id=CVE-2019-0657
14 Feb 2019 — A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'. Existe una vulnerabilidad en determinadas API de .Net Framework y en Visual Studio en la manera en la que analizan sintácticamente las URL. Esto también se conoce como ".NET Framework and Visual Studio Spoofing Vulnerability". .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and i... • http://www.securityfocus.com/bid/106890 • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 6%CPEs: 58EXPL: 0CVE-2019-0545 – Core: NCL - SocketsHttpHandler mishandling 1xx response as a final response leads to info disclosure
https://notcve.org/view.php?id=CVE-2019-0545
08 Jan 2019 — An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7/4.7.1/4.7.2, .NET Core 2.1, ... • http://www.securityfocus.com/bid/106405 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.5EPSS: 4%CPEs: 2EXPL: 0CVE-2019-0548 – Core: AspNetCoreModule WebSocket DOS
https://notcve.org/view.php?id=CVE-2019-0548
08 Jan 2019 — A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.2, ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0564. Existe una vulnerabilidad de denegación de servicio (DoS) cuando ASP.NET Core gestiona peticiones web de manera incorrecta. Esta vulnerabilidad también se conoce como "ASP.NET Core Denial of Service Vulnerability". • http://www.securityfocus.com/bid/106410 • CWE-19: Data Processing Errors CWE-400: Uncontrolled Resource Consumption •
CVSS: 7.5EPSS: 4%CPEs: 1EXPL: 0CVE-2019-0564 – Core: Kestrel - WebSocket DoS via CancellationToken (CoreFX and ASP.NET)
https://notcve.org/view.php?id=CVE-2019-0564
08 Jan 2019 — A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548. Existe una vulnerabilidad de denegación de servicio (DoS) cuando ASP.NET Core gestiona de manera indebida peticiones web. Esta vulnerabilidad también se conoce como "ASP.NET Core Denial of Service Vulnerability". • http://www.securityfocus.com/bid/106413 • CWE-19: Data Processing Errors CWE-400: Uncontrolled Resource Consumption •
CVSS: 7.5EPSS: 7%CPEs: 88EXPL: 0CVE-2018-8517
https://notcve.org/view.php?id=CVE-2018-8517
12 Dec 2018 — A denial of service vulnerability exists when .NET Framework improperly handles special web requests, aka ".NET Framework Denial Of Service Vulnerability." This affects Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 4.... • http://www.securityfocus.com/bid/106075 •
CVSS: 10.0EPSS: 11%CPEs: 88EXPL: 0CVE-2018-8540
https://notcve.org/view.php?id=CVE-2018-8540
12 Dec 2018 — A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection Vulnerability." This affects Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .N... • http://www.securityfocus.com/bid/106073 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 6.5EPSS: 2%CPEs: 1EXPL: 0CVE-2018-8416 – Core: Arbitrary file and directory creation
https://notcve.org/view.php?id=CVE-2018-8416
14 Nov 2018 — A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1. Existe una vulnerabilidad de manipulación cuando .NET Core analiza de manera incorrecta Los archivos especialmente manipulados. Esta vulnerabilidad también se conoce como ".NET Core Tampering Vulnerability". Esto afecta a .NET Core 2.1. .NET Core is a managed software framework. • http://www.securityfocus.com/bid/105798 •