Search for packages
| purl | pkg:nuget/Microsoft.AspNetCore.All@1.0.0 |
| Tags | Ghost |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-bmf7-rsbm-3fb1
Aliases: CVE-2017-8700 GHSA-3rp6-rjw4-cq39 |
Microsoft Security Advisory CVE-2017-8700: CORS bypass can enable Information Disclosure |
Affected by 3 other vulnerabilities. |
|
VCID-kn85-7zpm-rqcp
Aliases: CVE-2018-0808 |
Privilege Escalation ASP.NET Core allow an elevation of privilege vulnerability due to how ASP.NET web applications handle web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0784. |
Affected by 3 other vulnerabilities. |
|
VCID-r262-q86s-pue7
Aliases: CVE-2018-0787 GHSA-365p-96qv-xr7g |
Weak Password Recovery Mechanism for Forgotten Password ASP.NET Core allow an elevation of privilege vulnerability due to how web applications that are created from templates validate web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability". |
Affected by 3 other vulnerabilities. |
|
VCID-stea-61x4-xua6
Aliases: CVE-2018-0875 GHSA-xcvr-qv8h-m7xw |
Uncontrolled Resource Consumption .NET Core, .NET Core, NET Core and PowerShell Core allow a denial of Service vulnerability due to how specially crafted requests are handled, aka ".NET Core Denial of Service Vulnerability". |
Affected by 5 other vulnerabilities. Affected by 3 other vulnerabilities. |
|
VCID-ucc7-eecy-6qgq
Aliases: CVE-2018-8356 GHSA-p9wx-v264-q34p |
Microsoft Security Advisory CVE-2018-8356: .NET Core Security Feature Bypass Vulnerability |
Affected by 3 other vulnerabilities. |
|
VCID-vavn-24a8-e7d4
Aliases: CVE-2018-8171 GHSA-vhvh-528q-ff3p |
Microsoft Security Advisory CVE-2018-8171: ASP.NET Core Security Feature Bypass Vulnerability |
Affected by 3 other vulnerabilities. |
|
VCID-zdjb-98e7-6bgn
Aliases: CVE-2018-8292 GHSA-7jgj-8wvc-jh57 |
Microsoft Security Advisory CVE-2018-8292: .NET Core Information Disclosure Vulnerability |
Affected by 10 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||