Search for packages
purl | pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-x64@3.1.3 |
Tags | Ghost |
Next non-vulnerable version | None. |
Latest non-vulnerable version | None. |
Risk | 4.5 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-1gzq-upmj-aaaa
Aliases: CVE-2022-34716 GHSA-2m65-m22p-9wjw |
.NET Spoofing Vulnerability. |
Affected by 4 other vulnerabilities. Affected by 5 other vulnerabilities. |
VCID-231z-8sfm-aaaj
Aliases: CVE-2024-21386 GHSA-g74q-5xw3-j7q9 |
Microsoft Security Advisory CVE-2024-21386: .NET Denial of Service Vulnerability |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. Affected by 4 other vulnerabilities. |
VCID-8q71-vev8-aaar
Aliases: CVE-2021-1723 GHSA-242j-2gm6-5rwx |
Improper Input Validation ASP.NET Core and Visual Studio Denial of Service Vulnerability |
Affected by 10 other vulnerabilities. Affected by 9 other vulnerabilities. |
VCID-bsmn-prby-aaan
Aliases: CVE-2020-1597 GHSA-f8qx-mjcq-wfgx |
Improper Input Validation A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'. |
Affected by 12 other vulnerabilities. |
VCID-h8nb-ws34-aaam
Aliases: CVE-2022-38013 GHSA-r8m2-4x37-6592 |
.NET Denial of Service Vulnerability |
Affected by 3 other vulnerabilities. Affected by 4 other vulnerabilities. |
VCID-kkya-n1n5-aaaq
Aliases: CVE-2020-1161 GHSA-3cf7-7wq6-8842 |
Improper Input Validation A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'. |
Affected by 13 other vulnerabilities. |
VCID-m325-6pu8-aaam
Aliases: GHSA-vh55-786g-wjwj GMS-2024-75 GMS-2024-76 GMS-2024-77 GMS-2024-78 GMS-2024-79 GMS-2024-80 GMS-2024-81 GMS-2024-82 GMS-2024-83 GMS-2024-84 GMS-2024-85 GMS-2024-86 GMS-2024-90 |
.NET Information Disclosure Vulnerability |
Affected by 4 other vulnerabilities. Affected by 5 other vulnerabilities. |
VCID-n97k-usc6-aaaf
Aliases: CVE-2022-24464 GHSA-cw98-9j8w-wxv9 |
Uncontrolled Resource Consumption .NET and Visual Studio Denial of Service Vulnerability. |
Affected by 9 other vulnerabilities. Affected by 7 other vulnerabilities. Affected by 10 other vulnerabilities. |
VCID-ne7e-6kaa-aaam
Aliases: CVE-2022-29145 GHSA-fcg8-mg9g-6hc4 |
CVE-2022-29145 dotnet: parsing HTML causes Denial of Service |
Affected by 6 other vulnerabilities. Affected by 4 other vulnerabilities. Affected by 7 other vulnerabilities. |
VCID-qb99-hpey-aaap
Aliases: CVE-2023-33170 GHSA-25c8-p796-jg6r |
ASP.NET and Visual Studio Security Feature Bypass Vulnerability |
Affected by 3 other vulnerabilities. Affected by 4 other vulnerabilities. |
VCID-rcjn-7ufv-aaag
Aliases: CVE-2020-1045 GHSA-hxrm-9w7p-39cc |
Improper Input Validation A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names. The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded. The security update addresses the vulnerability by fixing the way the ASP.NET Core cookie parser handles encoded names., aka 'Microsoft ASP.NET Core Security Feature Bypass Vulnerability'. |
Affected by 11 other vulnerabilities. |
VCID-vjeg-wjgz-aaaa
Aliases: CVE-2024-30046 GHSA-hhc7-x9w4-cw47 |
Visual Studio Denial of Service Vulnerability |
Affected by 0 other vulnerabilities. Affected by 3 other vulnerabilities. |
VCID-wx18-a8wu-aaan
Aliases: CVE-2022-29117 GHSA-3rq8-h3gj-r5c6 |
Uncontrolled Resource Consumption .NET and Visual Studio Denial of Service Vulnerability. This CVE ID is unique from CVE-2022-23267, CVE-2022-29145. |
Affected by 6 other vulnerabilities. Affected by 4 other vulnerabilities. Affected by 7 other vulnerabilities. |
VCID-xydq-jftc-aaak
Aliases: CVE-2022-23267 GHSA-485p-mrj5-8w2v |
CVE-2022-23267 dotnet: excess memory allocation via HttpClient causes DoS |
Affected by 6 other vulnerabilities. Affected by 4 other vulnerabilities. Affected by 7 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |