Lookup for vulnerable packages by Package URL.

Purlpkg:nuget/Microsoft.AspNetCore.All@2.2.1
Typenuget
Namespace
NameMicrosoft.AspNetCore.All
Version2.2.1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version2.2.7
Latest_non_vulnerable_version5.0.9
Affected_by_vulnerabilities
0
url VCID-xgtm-9d66-rugc
vulnerability_id VCID-xgtm-9d66-rugc
summary Microsoft Security Advisory CVE-2018-8269: Denial of Service Vulnerability in OData
references
0
reference_url https://github.com/aspnet/Announcements/issues/385
reference_id
reference_type
scores
url https://github.com/aspnet/Announcements/issues/385
1
reference_url https://github.com/dotnet/aspnetcore/issues/13860
reference_id
reference_type
scores
url https://github.com/dotnet/aspnetcore/issues/13860
2
reference_url https://github.com/github/advisory-database/issues/302
reference_id
reference_type
scores
url https://github.com/github/advisory-database/issues/302
3
reference_url https://www.exploit-db.com/exploits/46101/
reference_id
reference_type
scores
url https://www.exploit-db.com/exploits/46101/
4
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/dos/46101.rb
reference_id CVE-2018-8269
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/dos/46101.rb
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-8269
reference_id CVE-2018-8269
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2018-8269
6
reference_url https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8269
reference_id CVE-2018-8269
reference_type
scores
url https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8269
7
reference_url https://github.com/advisories/GHSA-mv2r-q4g5-j8q5
reference_id GHSA-mv2r-q4g5-j8q5
reference_type
scores
url https://github.com/advisories/GHSA-mv2r-q4g5-j8q5
fixed_packages
0
url pkg:nuget/Microsoft.AspNetCore.All@2.2.7
purl pkg:nuget/Microsoft.AspNetCore.All@2.2.7
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.All@2.2.7
aliases CVE-2018-8269, GHSA-mv2r-q4g5-j8q5
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xgtm-9d66-rugc
Fixing_vulnerabilities
0
url VCID-v6vu-9ybt-tqbc
vulnerability_id VCID-v6vu-9ybt-tqbc
summary Microsoft Security Advisory CVE-2019-0564: ASP.NET Core Denial of Service Vulnerability
references
0
reference_url https://access.redhat.com/errata/RHSA-2019:0040
reference_id
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:0040
1
reference_url https://github.com/aspnet/Announcements/issues/334
reference_id
reference_type
scores
url https://github.com/aspnet/Announcements/issues/334
2
reference_url https://github.com/github/advisory-database/issues/302
reference_id
reference_type
scores
url https://github.com/github/advisory-database/issues/302
3
reference_url http://www.securityfocus.com/bid/106413
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/106413
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-0564
reference_id CVE-2019-0564
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2019-0564
5
reference_url https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0564
reference_id CVE-2019-0564
reference_type
scores
url https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0564
6
reference_url https://github.com/advisories/GHSA-6px8-22w5-w334
reference_id GHSA-6px8-22w5-w334
reference_type
scores
url https://github.com/advisories/GHSA-6px8-22w5-w334
fixed_packages
0
url pkg:nuget/Microsoft.AspNetCore.All@2.1.7
purl pkg:nuget/Microsoft.AspNetCore.All@2.1.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-xgtm-9d66-rugc
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.All@2.1.7
1
url pkg:nuget/Microsoft.AspNetCore.All@2.2.0
purl pkg:nuget/Microsoft.AspNetCore.All@2.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-c94t-hevg-xych
1
vulnerability VCID-v6vu-9ybt-tqbc
2
vulnerability VCID-vrkf-8nhe-7uc6
3
vulnerability VCID-xgtm-9d66-rugc
4
vulnerability VCID-xnp7-eqhh-tkhd
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.All@2.2.0
2
url pkg:nuget/Microsoft.AspNetCore.All@2.2.1
purl pkg:nuget/Microsoft.AspNetCore.All@2.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-xgtm-9d66-rugc
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.All@2.2.1
aliases CVE-2019-0564, GHSA-6px8-22w5-w334
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-v6vu-9ybt-tqbc
1
url VCID-xxkj-3kem-aufs
vulnerability_id VCID-xxkj-3kem-aufs
summary
URL Redirection to Untrusted Site ('Open Redirect')
A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'.
references
0
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-1075
reference_id CVE-2019-1075
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2019-1075
1
reference_url https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1075
reference_id CVE-2019-1075
reference_type
scores
url https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1075
fixed_packages
0
url pkg:nuget/Microsoft.AspNetCore.All@2.2.1
purl pkg:nuget/Microsoft.AspNetCore.All@2.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-xgtm-9d66-rugc
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.All@2.2.1
aliases CVE-2019-1075
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xxkj-3kem-aufs
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.All@2.2.1