Поиск уязвимостей
Количество 51
Количество 51
CVE-2025-55315
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.
CVE-2025-55315
ASP.NET Security Feature Bypass Vulnerability
GHSA-5rrx-jjjq-q2r5
Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability
BDU:2025-13247
Уязвимость программной платформы ASP.NET Core, связанная с недостатками обработки HTTP-запросов, позволяющая нарушителю обойти существующие ограничения безопасности
ROS-20261022-80-0104
Уязвимость dotnet9.0
ROS-20261022-73-0103
Уязвимость dotnet9.0
ROS-20261019-80-0031
Уязвимость dotnet8.0
ROS-20261019-73-0032
Уязвимость dotnet8.0
CVE-2025-55248
Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network.
CVE-2025-55248
Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network.
CVE-2025-55248
Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network.
CVE-2025-55248
.NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability
CVE-2025-55247
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
CVE-2025-55247
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
CVE-2025-55247
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
CVE-2025-55247
.NET Elevation of Privilege Vulnerability
ALT-PU-2025-15797
ALT-PU-2025-15797: package `dotnet-aspnetcore-8.0` update to version 8.0.21-alt1
ALT-PU-2025-13673
ALT-PU-2025-13673: package `dotnet-aspnetcore-8.0` update to version 8.0.21-alt1
ALT-PU-2025-13072
ALT-PU-2025-13072: package `dotnet-aspnetcore-9.0` update to version 9.0.10-alt1
GHSA-gwq6-fmvp-qp68
Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-55315 Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network. | CVSS3: 9.9 | 67% Средний | около 1 года назад |
 | CVE-2025-55315 ASP.NET Security Feature Bypass Vulnerability | CVSS3: 9.9 | 67% Средний | около 1 года назад |
| GHSA-5rrx-jjjq-q2r5 Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability | CVSS3: 9.9 | 67% Средний | около 1 года назад |
 | BDU:2025-13247 Уязвимость программной платформы ASP.NET Core, связанная с недостатками обработки HTTP-запросов, позволяющая нарушителю обойти существующие ограничения безопасности | CVSS3: 9.9 | 67% Средний | около 1 года назад |
 | ROS-20261022-80-0104 Уязвимость dotnet9.0 | CVSS3: 9.9 | 67% Средний | 21 день назад |
| ROS-20261022-73-0103 Уязвимость dotnet9.0 | CVSS3: 9.9 | 67% Средний | 21 день назад |
| ROS-20261019-80-0031 Уязвимость dotnet8.0 | CVSS3: 9.9 | 67% Средний | 24 дня назад |
| ROS-20261019-73-0032 Уязвимость dotnet8.0 | CVSS3: 9.9 | 67% Средний | 24 дня назад |
 | CVE-2025-55248 Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network. | CVSS3: 5.7 | 1% Низкий | около 1 года назад |
 | CVE-2025-55248 Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network. | CVSS3: 8.2 | 1% Низкий | около 1 года назад |
| CVE-2025-55248 Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network. | CVSS3: 5.7 | 1% Низкий | около 1 года назад |
| CVE-2025-55248 .NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability | CVSS3: 4.8 | 1% Низкий | около 1 года назад |
| CVE-2025-55247 Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. | CVSS3: 7.3 | 1% Низкий | около 1 года назад |
| CVE-2025-55247 Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. | CVSS3: 7.3 | 1% Низкий | около 1 года назад |
| CVE-2025-55247 Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. | CVSS3: 7.3 | 1% Низкий | около 1 года назад |
| CVE-2025-55247 .NET Elevation of Privilege Vulnerability | CVSS3: 7.3 | 1% Низкий | около 1 года назад |
| ALT-PU-2025-15797 ALT-PU-2025-15797: package `dotnet-aspnetcore-8.0` update to version 8.0.21-alt1 | CVSS3: 9.9 | 11 месяцев назад | |
| ALT-PU-2025-13673 ALT-PU-2025-13673: package `dotnet-aspnetcore-8.0` update to version 8.0.21-alt1 | CVSS3: 9.9 | около 1 года назад | |
| ALT-PU-2025-13072 ALT-PU-2025-13072: package `dotnet-aspnetcore-9.0` update to version 9.0.10-alt1 | CVSS3: 9.9 | 12 месяцев назад | |
| GHSA-gwq6-fmvp-qp68 Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability | CVSS3: 5.7 | 1% Низкий | около 1 года назад |
Уязвимостей на страницу