Search for packages
| purl | pkg:nuget/Microsoft.AspNetCore.All@2.0.3 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-ct2x-rftj-tydp
Aliases: GHSA-cgpw-2gph-2r9g GMS-2018-36 GMS-2018-38 GMS-2018-44 |
Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.App, and Microsoft.AspNetCore.Server.Kestrel.Core Microsoft is aware of a denial of service vulnerability in ASP.NET Core when a malformed request is terminated. An attacker who successfully exploited this vulnerability could cause a denial of service attack. The update addresses the vulnerability by correcting how ASP.NET Core handles such requests. |
Affected by 1 other vulnerability. Affected by 9 other vulnerabilities. |
|
VCID-vyrd-u846-8kdu
Aliases: GHSA-3m2r-q8x3-xmf7 GMS-2018-37 GMS-2018-39 GMS-2018-40 GMS-2018-43 |
Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.Server.Kestrel.Core, Microsoft.AspNetCore.Server.Kestrel.Transport.Abstractions, and Microsoft.AspNetCore.Server.Kestrel.Transport.Libuv Microsoft made an internal discovery of a security vulnerability in version 2.x of ASP.NET Core where a specially crafted request can cause excess resource consumption in Kestrel. |
Affected by 2 other vulnerabilities. |
|
VCID-zdjb-98e7-6bgn
Aliases: CVE-2018-8292 GHSA-7jgj-8wvc-jh57 |
Microsoft Security Advisory CVE-2018-8292: .NET Core Information Disclosure Vulnerability |
Affected by 10 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-1t9f-878v-x3h1 | Privilege Escalation ASP.NET Core allow an elevation of privilege vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0808. |
CVE-2018-0784
|
| VCID-7q42-unw8-kufd | URL Redirection to Untrusted Site ('Open Redirect') ASP.NET Core allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core Elevation Of Privilege Vulnerability". |
CVE-2017-11879
GHSA-3wcj-rg8q-9cqv |
| VCID-bmf7-rsbm-3fb1 | Microsoft Security Advisory CVE-2017-8700: CORS bypass can enable Information Disclosure |
CVE-2017-8700
GHSA-3rp6-rjw4-cq39 |
| VCID-kn85-7zpm-rqcp | Privilege Escalation ASP.NET Core allow an elevation of privilege vulnerability due to how ASP.NET web applications handle web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0784. |
CVE-2018-0808
|
| VCID-r262-q86s-pue7 | Weak Password Recovery Mechanism for Forgotten Password ASP.NET Core allow an elevation of privilege vulnerability due to how web applications that are created from templates validate web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability". |
CVE-2018-0787
GHSA-365p-96qv-xr7g |
| VCID-stea-61x4-xua6 | Uncontrolled Resource Consumption .NET Core, .NET Core, NET Core and PowerShell Core allow a denial of Service vulnerability due to how specially crafted requests are handled, aka ".NET Core Denial of Service Vulnerability". |
CVE-2018-0875
GHSA-xcvr-qv8h-m7xw |
| VCID-u9fp-mh5e-6ygh | Cross-Site Request Forgery (CSRF) ASP.NET Core allow a cross site request forgery vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core Cross Site Request Forgery Vulnerability". |
CVE-2018-0785
|
| VCID-ucc7-eecy-6qgq | Microsoft Security Advisory CVE-2018-8356: .NET Core Security Feature Bypass Vulnerability |
CVE-2018-8356
GHSA-p9wx-v264-q34p |
| VCID-vavn-24a8-e7d4 | Microsoft Security Advisory CVE-2018-8171: ASP.NET Core Security Feature Bypass Vulnerability |
CVE-2018-8171
GHSA-vhvh-528q-ff3p |