Search for packages
| purl | pkg:nuget/Microsoft.AspNetCore.All@2.0.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-3nkp-dtxb-aaam
Aliases: CVE-2018-0784 |
Privilege Escalation ASP.NET Core allow an elevation of privilege vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0808. |
Affected by 3 other vulnerabilities. |
|
VCID-4ycz-b62h-aaae
Aliases: CVE-2017-8700 GHSA-3rp6-rjw4-cq39 |
Permissive Cross-domain Policy with Untrusted Domains ASP.NET Core allow an attacker to bypass Cross-origin Resource Sharing (CORS) configurations and retrieve normally restricted content from a web application, aka "ASP.NET Core Information Disclosure Vulnerability". |
Affected by 3 other vulnerabilities. |
|
VCID-5h3z-fa4n-aaae
Aliases: CVE-2018-0787 GHSA-365p-96qv-xr7g |
ASP.NET Core allow an elevation of privilege |
Affected by 3 other vulnerabilities. |
|
VCID-5p1t-4vye-aaae
Aliases: CVE-2018-8171 GHSA-vhvh-528q-ff3p |
Security feature bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated |
Affected by 3 other vulnerabilities. |
|
VCID-c142-nvsc-aaaf
Aliases: GHSA-3m2r-q8x3-xmf7 GMS-2018-37 GMS-2018-39 GMS-2018-40 GMS-2018-43 |
Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.Server.Kestrel.Core, Microsoft.AspNetCore.Server.Kestrel.Transport.Abstractions, and Microsoft.AspNetCore.Server.Kestrel.Transport.Libuv |
Affected by 2 other vulnerabilities. |
|
VCID-dfht-553s-aaad
Aliases: CVE-2017-11879 GHSA-3wcj-rg8q-9cqv |
URL Redirection to Untrusted Site ('Open Redirect') ASP.NET Core allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core Elevation Of Privilege Vulnerability". |
Affected by 3 other vulnerabilities. |
|
VCID-g96g-hgdh-aaan
Aliases: CVE-2018-8356 GHSA-p9wx-v264-q34p |
Improper Certificate Validation A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework, Microsoft .NET Framework, Microsoft .NET Framework /4.7/4.7.1/4.7.2, ASP.NET Core, Microsoft .NET Framework, ASP.NET Core, ASP.NET Core, .NET Core, Microsoft .NET Framework, Microsoft .NET Framework, Microsoft .NET Framework /4.6.1/4.6.2, .NET Core, .NET Core, Microsoft .NET Framework, Microsoft .NET Framework /4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework |
Affected by 3 other vulnerabilities. |
|
VCID-gp99-uuan-aaac
Aliases: CVE-2018-0785 |
Cross-Site Request Forgery (CSRF) ASP.NET Core allow a cross site request forgery vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core Cross Site Request Forgery Vulnerability". |
Affected by 3 other vulnerabilities. |
|
VCID-hg9g-j6zh-aaaa
Aliases: GHSA-cgpw-2gph-2r9g GMS-2018-36 GMS-2018-38 GMS-2018-44 |
Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.App, and Microsoft.AspNetCore.Server.Kestrel.Core |
Affected by 1 other vulnerability. Affected by 12 other vulnerabilities. |
|
VCID-jm74-ks6f-aaaa
Aliases: CVE-2018-8292 GHSA-7jgj-8wvc-jh57 |
.NET Core Information Disclosure |
Affected by 11 other vulnerabilities. |
|
VCID-kqu6-94cz-aaaq
Aliases: CVE-2018-0875 GHSA-xcvr-qv8h-m7xw |
Uncontrolled Resource Consumption .NET Core, .NET Core, NET Core and PowerShell Core allow a denial of Service vulnerability due to how specially crafted requests are handled, aka ".NET Core Denial of Service Vulnerability". |
Affected by 3 other vulnerabilities. |
|
VCID-ut8u-n443-aaap
Aliases: CVE-2018-0808 |
Privilege Escalation ASP.NET Core allow an elevation of privilege vulnerability due to how ASP.NET web applications handle web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0784. |
Affected by 3 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||