Skip to contentMicrosoft Asp.net vulnerabilities
- microsoft asp.net coreASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to the ASP.NET...CVE-2018-07848.8 High
- microsoft asp.net coreCross-origin Resource Sharing bypass in ASP.NET CoreCVE-2017-8700Fix availableEPSS 10.4%7.5 High
- microsoft asp.net, aspnetcore +1 moreDenial of service in ASP.NET CoreCVE-2017-11883Fix available7.5 High
- microsoft asp.net coreOpen redirect in ASP.NET CoreCVE-2017-11879Fix available8.8 High
- microsoft asp.net core, asp.net model view controller, microsoft.aspnetcore.mvc.abstractions +16 more +18 moreModerate severity vulnerability that affects Microsoft.AspNetCore.MvcCVE-2017-0256Fix available5.3 Medium
- microsoft asp.net core, asp.net model view controller, microsoft.aspnetcore.mvc.abstractions +16 more +18 moreHigh severity vulnerability that affects Microsoft.AspNetCore.MvcCVE-2017-0249Fix available7.3 High
- microsoft asp.net core, system.text.encodings.web, asp.net model view controller +16 more +18 moreASP.NET Core fails to properly validate web requestsCVE-2017-0247Fix availableEPSS 16.9%7.5 High
- microsoft asp.net model view controllerCross-site scripting (XSS) vulnerability in System.Web.Mvc.dll in Microsoft ASP.NET Model View...CVE-2014-4075EPSS 20.2%4.3 Medium
- microsoft asp.net signalr, visual studio team foundation server +1 moreCross-site scripting (XSS) vulnerability in Microsoft ASP.NET SignalR 1.1.x before 1.1.4 and 2.0...CVE-2013-5042EPSS 11.7%4.3 Medium
- microsoft asp.netASP.NET in Microsoft .NET 3.5 does not properly handle an unencrypted view state, which allows...CVE-2010-20884.3 Medium
- microsoft asp.netMicrosoft ASP.NET 2.0 does not prevent setting the InnerHtml property on a control that inherits...CVE-2010-2084EPSS 12.5%4.3 Medium
- microsoft asp.netMicrosoft w3wp (aka w3wp.exe) does not properly handle when the AspCompat directive is not used...CVE-2006-1364Public exploitEPSS 58.7%7.5 High
- microsoft asp.netaspnet_wp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of...CVE-2005-2224EPSS 17.8%5.0 Medium
- microsoft asp.netThe __VIEWSTATE functionality in Microsoft ASP.NET 1.x, when not cryptographically signed, allows...CVE-2005-1665EPSS 40.3%5.0 Medium
- microsoft asp.netThe __VIEWSTATE functionality in Microsoft ASP.NET 1.x allows remote attackers to conduct replay...CVE-2005-1664EPSS 18.8%6.4 Medium
- microsoft asp.netMultiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to...CVE-2005-0452Public exploitEPSS 23.4%4.3 Medium
- microsoft asp.netThe Microsoft .NET forms authentication capability for ASP.NET allows remote attackers to bypass...CVE-2004-0847Public exploitEPSS 75.7%9.8 Critical
- microsoft asp.netMicrosoft ASP.Net 1.1 allows remote attackers to bypass the Cross-Site Scripting (XSS) and Script...CVE-2003-0768EPSS 13.0%6.8 Medium