NuGet package
microsoft.netcore.app
pkg:nuget/microsoft.netcore.app
Vulnerabilities (10)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-34485 | — | >= 2.1.0, < 2.1.29 | 2.1.29 | Aug 12, 2021 | .NET Core and Visual Studio Information Disclosure Vulnerability | ||
| CVE-2021-1721 | — | >= 2.1.0, < 2.1.25 | 2.1.25 | Feb 25, 2021 | .NET Core and Visual Studio Denial of Service Vulnerability | ||
| CVE-2020-1147 | — | KEV | >= 2.1.0, < 2.1.20 | 2.1.20 | Jul 14, 2020 | A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'. | |
| CVE-2020-1108 | — | >= 2.1.0, < 2.1.18 | 2.1.18 | May 21, 2020 | A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Core & .NET Framework Denial of Service Vulnerability'. | ||
| CVE-2019-0657 | — | >= 2.2.0, < 2.2.2 | 2.2.2 | Mar 6, 2019 | A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'. | ||
| CVE-2019-0564 | — | >= 2.2.0, < 2.2.1 | 2.2.1 | Jan 8, 2019 | A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548. | ||
| CVE-2019-0545 | — | >= 2.1.0, < 2.1.7 | 2.1.7 | Jan 8, 2019 | An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framewor | ||
| CVE-2018-8416 | — | >= 2.1.0, < 2.1.7 | 2.1.7 | Nov 14, 2018 | A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1. | ||
| CVE-2017-11770 | Hig | 7.5 | >= 1.0.0, < 2.0.3 | 2.0.3 | Nov 15, 2017 | .NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of service vulnerability exists when .NET Core improperly handles parsing certificate da | |
| CVE-2017-8585 | Hig | 7.5 | >= 1.0.0, < 1.0.7 | 1.0.7 | Jul 11, 2017 | Microsoft .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7 allow an attacker to send specially crafted requests to a .NET web application, resulting in denial of service, aka .NET Denial of Service Vulnerability. |
- CVE-2021-34485Aug 12, 2021affected >= 2.1.0, < 2.1.29fixed 2.1.29
.NET Core and Visual Studio Information Disclosure Vulnerability
- CVE-2021-1721Feb 25, 2021affected >= 2.1.0, < 2.1.25fixed 2.1.25
.NET Core and Visual Studio Denial of Service Vulnerability
- affected >= 2.1.0, < 2.1.20fixed 2.1.20
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.
- CVE-2020-1108May 21, 2020affected >= 2.1.0, < 2.1.18fixed 2.1.18
A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Core & .NET Framework Denial of Service Vulnerability'.
- CVE-2019-0657Mar 6, 2019affected >= 2.2.0, < 2.2.2fixed 2.2.2
A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.
- CVE-2019-0564Jan 8, 2019affected >= 2.2.0, < 2.2.1fixed 2.2.1
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548.
- CVE-2019-0545Jan 8, 2019affected >= 2.1.0, < 2.1.7fixed 2.1.7
An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framewor
- CVE-2018-8416Nov 14, 2018affected >= 2.1.0, < 2.1.7fixed 2.1.7
A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1.
- affected >= 1.0.0, < 2.0.3fixed 2.0.3
.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of service vulnerability exists when .NET Core improperly handles parsing certificate da
- affected >= 1.0.0, < 1.0.7fixed 1.0.7
Microsoft .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7 allow an attacker to send specially crafted requests to a .NET web application, resulting in denial of service, aka .NET Denial of Service Vulnerability.