Page 30 of 302 results (0.008 seconds)

CVSS: 7.8EPSS: 0%CPEs: 53EXPL: 0

CVE-2018-1039

https://notcve.org/view.php?id=CVE-2018-1039

A security feature bypass vulnerability exists in .Net Framework which could allow an attacker to bypass Device Guard, aka ".NET Framework Device Guard Security Feature Bypass Vulnerability." This affects Microsoft .NET Framework 4.7.1, Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1, Microsoft .NET Framework 3.0, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6.2/4.7/4.7.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1, Microsoft .NET Framework 2.0, Microsoft .NET Framework 4.6/4.6.1/4.6.2. Existe una vulnerabilidad de omisión de la característica de seguridad en .Net Framework que podría permitir que un atacante omita Device Guard. Esto también se conoce como ".NET Framework Device Guard Security Feature Bypass Vulnerability". Esto afecta a Microsoft .NET Framework 4.7.1, Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1, Microsoft .NET Framework 3.0, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6.2/4.7/4.7.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1, Microsoft .NET Framework 2.0 y Microsoft .NET Framework 4.6/4.6.1/4.6.2. • http://www.securityfocus.com/bid/104072 http://www.securitytracker.com/id/1040851 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1039 •

CVSS: 8.8EPSS: 2%CPEs: 3EXPL: 0

CVE-2018-0787

https://notcve.org/view.php?id=CVE-2018-0787

ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how web applications that are created from templates validate web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability". ASP.NET Core 1.0, 1.1 y 2.0 permite una vulnerabilidad de elevación de privilegios debido a la forma en la que las aplicaciones web que se crean a partir de plantillas validan las peticiones web. Esto también se conoce como "ASP.NET Core Elevation Of Privilege Vulnerability". • http://www.securityfocus.com/bid/103282 http://www.securitytracker.com/id/1040525 https://github.com/aspnet/Announcements/issues/295 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0787 • CWE-640: Weak Password Recovery Mechanism for Forgotten Password •

CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0

CVE-2018-0875 – Core: Hash Collision Denial of Service

https://notcve.org/view.php?id=CVE-2018-0875

.NET Core 1.0, .NET Core 1.1, NET Core 2.0 and PowerShell Core 6.0.0 allow a denial of Service vulnerability due to how specially crafted requests are handled, aka ".NET Core Denial of Service Vulnerability". .NET Core 1.0, .NET Core 1.1, NET Core 2.0 y PowerShell Core 6.0.0 permiten una vulnerabilidad de denegación de servicio (DoS) debido a la forma en la que se gestionan las peticiones especialmente manipuladas. Esto también se conoce como ".NET Core Denial of Service Vulnerability". It was found that string comparisons in .NET Core did not use a secure hashing algorithm. This could allow an attacker to predict string hashes and cause a denial of service by intentionally creating collisions thus forcing long look up times. • http://www.securityfocus.com/bid/103225 http://www.securitytracker.com/id/1040505 https://access.redhat.com/errata/RHSA-2018:0522 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0875 https://access.redhat.com/security/cve/CVE-2018-0875 https://bugzilla.redhat.com/show_bug.cgi?id=1552060 •

CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0

CVE-2018-0808

https://notcve.org/view.php?id=CVE-2018-0808

ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how ASP.NET web applications handle web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0784. ASP.NET Core 1.0, 1.1 y 2.0 permite una vulnerabilidad de elevación de privilegios debido a la forma en la que las aplicaciones web gestionan las peticiones web. Esto también se conoce como "ASP.NET Core Elevation Of Privilege Vulnerability". El ID de este CVE es diferente de CVE-2018-0784. • http://www.securityfocus.com/bid/103226 http://www.securitytracker.com/id/1040504 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0808 •

CVSS: 7.5EPSS: 0%CPEs: 51EXPL: 0

CVE-2018-0786

https://notcve.org/view.php?id=CVE-2018-0786

Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, .NET Core 1.0 and 2.0, and PowerShell Core 6.0.0 allow a security feature bypass vulnerability due to the way certificates are validated, aka ".NET Security Feature Bypass Vulnerability." Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1; .NET Core 1.0 y 2.0; y PowerShell Core 6.0.0 permiten una vulnerabilidad de omisión de la característica de seguridad debido a la forma en la que se validan los certificados. Esto también se conoce como ".NET Security Feature Bypass Vulnerability". • http://www.securityfocus.com/bid/102380 http://www.securitytracker.com/id/1040152 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0786 • CWE-295: Improper Certificate Validation •