Page 5 of 62 results (0.004 seconds)

CVSS: 7.5EPSS: 1%CPEs: 84EXPL: 0

CVE-2019-0980 – dotnet: infinite loop in Uri.TryCreate leading to ASP.Net Core Denial of Service

https://notcve.org/view.php?id=CVE-2019-0980

16 May 2019 — A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0981. Existe una vulnerabilidad de Denegación de Servicio (DoS) cuando .NET Framework o .NET Core manejan inapropiadamente las solicitudes web, también conocidas como '.Net Framework y .Net Core Denial of Service Vulnerability'. Este ID de CVE es diferente de CVE-2019-0820, CVE-2019-098... • https://access.redhat.com/errata/RHSA-2019:1259 • CWE-19: Data Processing Errors CWE-400: Uncontrolled Resource Consumption •

CVSS: 7.5EPSS: 1%CPEs: 84EXPL: 0

CVE-2019-0981 – dotnet: crash in IPAddress.TryCreate leading to ASP.Net Core Denial of Service

https://notcve.org/view.php?id=CVE-2019-0981

16 May 2019 — A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0820, CVE-2019-0980. Existe una vulnerabilidad de Denegación de Servicio (DoS) cuando .NET Framework o .NET Core manejan inapropiadamente las solicitudes web, también conocidas como '.Net Framework y .Net Core Denial of Service Vulnerability'. Este ID de CVE es diferente de CVE-2019-0820, CVE-2019-098... • https://access.redhat.com/errata/RHSA-2019:1259 • CWE-19: Data Processing Errors CWE-400: Uncontrolled Resource Consumption •

CVSS: 7.5EPSS: 2%CPEs: 95EXPL: 0

CVE-2019-0820 – dotnet: timeouts for regular expressions are not enforced

https://notcve.org/view.php?id=CVE-2019-0820

16 May 2019 — A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981. Existe una vulnerabilidad de Denegación de Servicio (DoS) cuando .NET Framework y .NET Core procesan inapropiadamente cadenas RegEx, conocidas como ".NET Framework y .NET Core Denial of Service Vulnerability". Este ID de CVE es diferente de CVE-2019-0980, CVE-2019-0981. .NET Co... • https://access.redhat.com/errata/RHSA-2019:1259 • CWE-400: Uncontrolled Resource Consumption •

CVSS: 9.3EPSS: 19%CPEs: 66EXPL: 0

CVE-2019-0613

https://notcve.org/view.php?id=CVE-2019-0613

05 Mar 2019 — A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework and Visual Studio Remote Code Execution Vulnerability'. Existe una vulnerabilidad de ejecución remota de código en el software de .NET Framework y en Visual Studio cuando el software no comprueba correctamente el marcado de... • http://www.securityfocus.com/bid/106872 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.5EPSS: 2%CPEs: 72EXPL: 0

CVE-2019-0657 – dotnet: Domain-spoofing attack in System.Uri

https://notcve.org/view.php?id=CVE-2019-0657

14 Feb 2019 — A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'. Existe una vulnerabilidad en determinadas API de .Net Framework y en Visual Studio en la manera en la que analizan sintácticamente las URL. Esto también se conoce como ".NET Framework and Visual Studio Spoofing Vulnerability". .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and i... • http://www.securityfocus.com/bid/106890 • CWE-20: Improper Input Validation •

CVSS: 7.5EPSS: 6%CPEs: 58EXPL: 0

CVE-2019-0545 – Core: NCL - SocketsHttpHandler mishandling 1xx response as a final response leads to info disclosure

https://notcve.org/view.php?id=CVE-2019-0545

08 Jan 2019 — An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7/4.7.1/4.7.2, .NET Core 2.1, ... • http://www.securityfocus.com/bid/106405 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 7.5EPSS: 7%CPEs: 88EXPL: 0

CVE-2018-8517

https://notcve.org/view.php?id=CVE-2018-8517

12 Dec 2018 — A denial of service vulnerability exists when .NET Framework improperly handles special web requests, aka ".NET Framework Denial Of Service Vulnerability." This affects Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 4.... • http://www.securityfocus.com/bid/106075 •

CVSS: 10.0EPSS: 11%CPEs: 88EXPL: 0

CVE-2018-8540

https://notcve.org/view.php?id=CVE-2018-8540

12 Dec 2018 — A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection Vulnerability." This affects Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .N... • http://www.securityfocus.com/bid/106073 • CWE-94: Improper Control of Generation of Code ('Code Injection') •

CVSS: 10.0EPSS: 16%CPEs: 63EXPL: 0

CVE-2018-8421

https://notcve.org/view.php?id=CVE-2018-8421

13 Sep 2018 — A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input, aka ".NET Framework Remote Code Execution Vulnerability." This affects Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 3.0, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 4.7.1/... • http://www.securityfocus.com/bid/105222 • CWE-20: Improper Input Validation •

CVSS: 7.5EPSS: 4%CPEs: 53EXPL: 0

CVE-2018-8360

https://notcve.org/view.php?id=CVE-2018-8360

15 Aug 2018 — An information disclosure vulnerability exists in Microsoft .NET Framework that could allow an attacker to access information in multi-tenant environments, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.0, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Micros... • http://www.securityfocus.com/bid/104986 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •