CVSS: 7.5EPSS: 3%CPEs: 4EXPL: 0CVE-2018-8292 – Core: information disclosure due to authentication information exposed in a redirect
https://notcve.org/view.php?id=CVE-2018-8292
10 Oct 2018 — An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core 6.0. Existe una vulnerabilidad de divulgación de información en .NET Core cuando la información de autenticación se expone de forma inadvertida en una redirección. Esto también se conoce como ".NET Core Information Disclosure Vulnerability". Esto afect... • http://www.securityfocus.com/bid/105548 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-201: Insertion of Sensitive Information Into Sent Data •
CVSS: 7.5EPSS: 7%CPEs: 3EXPL: 0CVE-2018-8409
https://notcve.org/view.php?id=CVE-2018-8409
13 Sep 2018 — A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1. Existe una vulnerabilidad de denegación de servicio (DoS) cuando System.IO.Pipelines gestiona incorrectamente las peticiones. Esto también se conoce como "System.IO.Pipelines Denial of Service". Esto afecta a .NET Core 2.1, System.IO.Pipelines y ASP.NET Core 2.1. • http://www.securityfocus.com/bid/105223 •
CVSS: 10.0EPSS: 16%CPEs: 63EXPL: 0CVE-2018-8421
https://notcve.org/view.php?id=CVE-2018-8421
13 Sep 2018 — A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input, aka ".NET Framework Remote Code Execution Vulnerability." This affects Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 3.0, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 4.7.1/... • http://www.securityfocus.com/bid/105222 • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 4%CPEs: 53EXPL: 0CVE-2018-8360
https://notcve.org/view.php?id=CVE-2018-8360
15 Aug 2018 — An information disclosure vulnerability exists in Microsoft .NET Framework that could allow an attacker to access information in multi-tenant environments, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.0, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Micros... • http://www.securityfocus.com/bid/104986 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.8EPSS: 1%CPEs: 152EXPL: 0CVE-2018-5391 – The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packets
https://notcve.org/view.php?id=CVE-2018-5391
14 Aug 2018 — The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size. El kernel de Linux en versio... • http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt • CWE-20: Improper Input Validation CWE-400: Uncontrolled Resource Consumption •
CVSS: 7.5EPSS: 8%CPEs: 5EXPL: 0CVE-2018-8171
https://notcve.org/view.php?id=CVE-2018-8171
11 Jul 2018 — A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MVC 5.2. Existe una vulnerabilidad de omisión de la característica de seguridad en ASP.NET cuando el número de intentos de inicio de sesión incorrectos no se valida. Esto también se conoce como "ASP.NET Security Feature Bypass Vulnerability". Esto afecta ... • http://www.securityfocus.com/bid/104659 • CWE-287: Improper Authentication •
CVSS: 7.8EPSS: 1%CPEs: 59EXPL: 0CVE-2018-8202 – Microsoft Security Bulletin CVE Revision Increment for August, 2018
https://notcve.org/view.php?id=CVE-2018-8202
11 Jul 2018 — An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level, aka ".NET Framework Elevation of Privilege Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1,... • http://www.securityfocus.com/bid/104665 •
CVSS: 8.8EPSS: 49%CPEs: 14EXPL: 0CVE-2018-8260 – Microsoft Security Bulletin CVE Revision Increment for July, 2018
https://notcve.org/view.php?id=CVE-2018-8260
11 Jul 2018 — A Remote Code Execution vulnerability exists in .NET software when the software fails to check the source markup of a file, aka ".NET Framework Remote Code Execution Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 4.7.2. Existe una vulnerabilidad de ejecución remota de código en el software de .NET cuando el software no comprueba el marcado de fuentes de un archivo. Esto también se conoce como ".NET Framework Remote Code Execution Vulnerability". Esto afecta a .NET Framework 4.7.... • http://www.securityfocus.com/bid/104666 • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 53%CPEs: 67EXPL: 1CVE-2018-8284 – Microsoft Security Bulletin CVE Revision Increment for August, 2018
https://notcve.org/view.php?id=CVE-2018-8284
11 Jul 2018 — A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET F... • https://github.com/quantiti/CVE-2018-8284-Sharepoint-RCE • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 5.5EPSS: 0%CPEs: 60EXPL: 0CVE-2018-8356 – Microsoft Security Bulletin CVE Revision Increment for July, 2018
https://notcve.org/view.php?id=CVE-2018-8356
11 Jul 2018 — A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, ASP.NET Core 1.1, Microsoft .NET Framework 4.5.2, ASP.NET Core 2.0, ASP.NET Core 1.0, .NET Core 1.1, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET C... • http://www.securityfocus.com/bid/104664 • CWE-295: Improper Certificate Validation •