Search for packages
| purl | pkg:nuget/Microsoft.AspNetCore.All@2.0.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1t9f-878v-x3h1
Aliases: CVE-2018-0784 |
Privilege Escalation ASP.NET Core allow an elevation of privilege vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0808. |
Affected by 3 other vulnerabilities. |
|
VCID-7q42-unw8-kufd
Aliases: CVE-2017-11879 GHSA-3wcj-rg8q-9cqv |
URL Redirection to Untrusted Site ('Open Redirect') ASP.NET Core allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core Elevation Of Privilege Vulnerability". |
Affected by 3 other vulnerabilities. |
|
VCID-bmf7-rsbm-3fb1
Aliases: CVE-2017-8700 GHSA-3rp6-rjw4-cq39 |
Microsoft Security Advisory CVE-2017-8700: CORS bypass can enable Information Disclosure |
Affected by 3 other vulnerabilities. |
|
VCID-ct2x-rftj-tydp
Aliases: GHSA-cgpw-2gph-2r9g GMS-2018-36 GMS-2018-38 GMS-2018-44 |
Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.App, and Microsoft.AspNetCore.Server.Kestrel.Core Microsoft is aware of a denial of service vulnerability in ASP.NET Core when a malformed request is terminated. An attacker who successfully exploited this vulnerability could cause a denial of service attack. The update addresses the vulnerability by correcting how ASP.NET Core handles such requests. |
Affected by 1 other vulnerability. Affected by 9 other vulnerabilities. |
|
VCID-kn85-7zpm-rqcp
Aliases: CVE-2018-0808 |
Privilege Escalation ASP.NET Core allow an elevation of privilege vulnerability due to how ASP.NET web applications handle web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0784. |
Affected by 3 other vulnerabilities. |
|
VCID-r262-q86s-pue7
Aliases: CVE-2018-0787 GHSA-365p-96qv-xr7g |
Weak Password Recovery Mechanism for Forgotten Password ASP.NET Core allow an elevation of privilege vulnerability due to how web applications that are created from templates validate web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability". |
Affected by 3 other vulnerabilities. |
|
VCID-stea-61x4-xua6
Aliases: CVE-2018-0875 GHSA-xcvr-qv8h-m7xw |
Uncontrolled Resource Consumption .NET Core, .NET Core, NET Core and PowerShell Core allow a denial of Service vulnerability due to how specially crafted requests are handled, aka ".NET Core Denial of Service Vulnerability". |
Affected by 3 other vulnerabilities. |
|
VCID-u9fp-mh5e-6ygh
Aliases: CVE-2018-0785 |
Cross-Site Request Forgery (CSRF) ASP.NET Core allow a cross site request forgery vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core Cross Site Request Forgery Vulnerability". |
Affected by 3 other vulnerabilities. |
|
VCID-ucc7-eecy-6qgq
Aliases: CVE-2018-8356 GHSA-p9wx-v264-q34p |
Microsoft Security Advisory CVE-2018-8356: .NET Core Security Feature Bypass Vulnerability |
Affected by 3 other vulnerabilities. |
|
VCID-vavn-24a8-e7d4
Aliases: CVE-2018-8171 GHSA-vhvh-528q-ff3p |
Microsoft Security Advisory CVE-2018-8171: ASP.NET Core Security Feature Bypass Vulnerability |
Affected by 3 other vulnerabilities. |
|
VCID-vyrd-u846-8kdu
Aliases: GHSA-3m2r-q8x3-xmf7 GMS-2018-37 GMS-2018-39 GMS-2018-40 GMS-2018-43 |
Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.Server.Kestrel.Core, Microsoft.AspNetCore.Server.Kestrel.Transport.Abstractions, and Microsoft.AspNetCore.Server.Kestrel.Transport.Libuv Microsoft made an internal discovery of a security vulnerability in version 2.x of ASP.NET Core where a specially crafted request can cause excess resource consumption in Kestrel. |
Affected by 2 other vulnerabilities. |
|
VCID-zdjb-98e7-6bgn
Aliases: CVE-2018-8292 GHSA-7jgj-8wvc-jh57 |
Microsoft Security Advisory CVE-2018-8292: .NET Core Information Disclosure Vulnerability |
Affected by 10 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||