CVSS: 7.5EPSS: 2%CPEs: 72EXPL: 0CVE-2019-0657 – dotnet: Domain-spoofing attack in System.Uri
https://notcve.org/view.php?id=CVE-2019-0657
14 Feb 2019 — A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'. Existe una vulnerabilidad en determinadas API de .Net Framework y en Visual Studio en la manera en la que analizan sintácticamente las URL. Esto también se conoce como ".NET Framework and Visual Studio Spoofing Vulnerability". .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and i... • http://www.securityfocus.com/bid/106890 • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 17%CPEs: 20EXPL: 0CVE-2018-8256
https://notcve.org/view.php?id=CVE-2018-8256
14 Nov 2018 — A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft PowerShell Remote Code Execution Vulnerability." This affects Windows RT 8.1, PowerShell Core 6.0, Microsoft.PowerShell.Archive 1.2.2.0, Windows Server 2016, Windows Server 2012, Windows Server 2008 R2, Windows Server 2019, Windows 7, Windows Server 2012 R2, PowerShell Core 6.1, Windows 10 Servers, Windows 10, Windows 8.1. Existe una vulnerabilidad de ejecución remota de código cuando Powe... • http://www.securityfocus.com/bid/105781 •
CVSS: 7.8EPSS: 0%CPEs: 18EXPL: 0CVE-2018-8415
https://notcve.org/view.php?id=CVE-2018-8415
14 Nov 2018 — A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code, aka "Microsoft PowerShell Tampering Vulnerability." This affects Windows 7, PowerShell Core 6.1, Windows Server 2012 R2, Windows RT 8.1, PowerShell Core 6.0, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. Existe una vulnerabilidad de falsificación en PowerShell que podría permitir que un atacante ejecute código no registrad... • http://www.securityfocus.com/bid/105792 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 7.5EPSS: 3%CPEs: 4EXPL: 0CVE-2018-8292 – Core: information disclosure due to authentication information exposed in a redirect
https://notcve.org/view.php?id=CVE-2018-8292
10 Oct 2018 — An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core 6.0. Existe una vulnerabilidad de divulgación de información en .NET Core cuando la información de autenticación se expone de forma inadvertida en una redirección. Esto también se conoce como ".NET Core Information Disclosure Vulnerability". Esto afect... • http://www.securityfocus.com/bid/105548 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-201: Insertion of Sensitive Information Into Sent Data •
CVSS: 5.5EPSS: 0%CPEs: 60EXPL: 0CVE-2018-8356 – Microsoft Security Bulletin CVE Revision Increment for July, 2018
https://notcve.org/view.php?id=CVE-2018-8356
11 Jul 2018 — A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, ASP.NET Core 1.1, Microsoft .NET Framework 4.5.2, ASP.NET Core 2.0, ASP.NET Core 1.0, .NET Core 1.1, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET C... • http://www.securityfocus.com/bid/104664 • CWE-295: Improper Certificate Validation •
CVSS: 7.5EPSS: 13%CPEs: 4EXPL: 0CVE-2018-0875 – Core: Hash Collision Denial of Service
https://notcve.org/view.php?id=CVE-2018-0875
14 Mar 2018 — .NET Core 1.0, .NET Core 1.1, NET Core 2.0 and PowerShell Core 6.0.0 allow a denial of Service vulnerability due to how specially crafted requests are handled, aka ".NET Core Denial of Service Vulnerability". .NET Core 1.0, .NET Core 1.1, NET Core 2.0 y PowerShell Core 6.0.0 permiten una vulnerabilidad de denegación de servicio (DoS) debido a la forma en la que se gestionan las peticiones especialmente manipuladas. Esto también se conoce como ".NET Core Denial of Service Vulnerability". It was found that st... • http://www.securityfocus.com/bid/103225 •
CVSS: 7.5EPSS: 17%CPEs: 51EXPL: 0CVE-2018-0764 – Core: Improper processing of XML documents can cause a denial of service
https://notcve.org/view.php?id=CVE-2018-0764
10 Jan 2018 — Microsoft .NET Framework 1.1, 2.0, 3.0, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 5.7 and .NET Core 1.0. 1.1 and 2.0 allow a denial of service vulnerability due to the way XML documents are processed, aka ".NET and .NET Core Denial Of Service Vulnerability". This CVE is unique from CVE-2018-0765. Microsoft .NET Framework 1.1, 2.0, 3.0, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 y 5.7 y.NET Core 1.0, 1.1 y 2.0 permiten una vulnerabilidad de denegación de servicio (DoS) debido a la form... • http://www.securityfocus.com/bid/102387 • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 0%CPEs: 51EXPL: 0CVE-2018-0786
https://notcve.org/view.php?id=CVE-2018-0786
10 Jan 2018 — Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, .NET Core 1.0 and 2.0, and PowerShell Core 6.0.0 allow a security feature bypass vulnerability due to the way certificates are validated, aka ".NET Security Feature Bypass Vulnerability." Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1; .NET Core 1.0 y 2.0; y PowerShell Core 6.0.0 permiten una vulnerabilidad de omisión de la característica de seguridad debido a la forma en... • http://www.securityfocus.com/bid/102380 • CWE-295: Improper Certificate Validation •