Поиск уязвимостей
Количество 21
Количество 21
ALT-PU-2021-1178
ALT-PU-2021-1178: package `dotnet-bootstrap` update to version 3.1.11-alt1
CVE-2020-1045
<p>A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.</p> <p>The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded.</p> <p>The security update addresses the vulnerability by fixing the way the ASP.NET Core cookie parser handles encoded names.</p>
CVE-2020-1045
<p>A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.</p> <p>The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded.</p> <p>The security update addresses the vulnerability by fixing the way the ASP.NET Core cookie parser handles encoded names.</p>
CVE-2020-1045
Microsoft ASP.NET Core Security Feature Bypass Vulnerability
CVE-2020-1045
<p>A security feature bypass vulnerability exists in the way Microsoft ...
GHSA-hxrm-9w7p-39cc
Cookie parsing failure
ELSA-2020-3699
ELSA-2020-3699: .NET Core 3.1 security and bugfix update (IMPORTANT)
BDU:2020-04581
Уязвимость анализатора файлов cookie программной платформы ASP.NET Core, позволяющая нарушителю выполнить обход функций безопасности
CVE-2020-1597
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the ASP.NET Core application. The update addresses the vulnerability by correcting how the ASP.NET Core web application handles web requests.
CVE-2020-1597
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the ASP.NET Core application. The update addresses the vulnerability by correcting how the ASP.NET Core web application handles web requests.
CVE-2020-1597
ASP.NET Core Denial of Service Vulnerability
CVE-2021-1723
ASP.NET Core and Visual Studio Denial of Service Vulnerability
CVE-2021-1723
ASP.NET Core and Visual Studio Denial of Service Vulnerability
CVE-2021-1723
ASP.NET Core and Visual Studio Denial of Service Vulnerability
GHSA-f8qx-mjcq-wfgx
ASP.NET Core Denial of Service Vulnerability
ELSA-2020-3422
ELSA-2020-3422: .NET Core 3.1 security and bugfix update (IMPORTANT)
BDU:2020-04007
Уязвимость программной платформы ASP.NET Core, связанная с ошибками обработки запросов, позволяющая нарушителю вызвать отказ в обслуживании
GHSA-242j-2gm6-5rwx
ASP.NET Core and Visual Studio Denial of Service Vulnerability
ELSA-2021-0095
ELSA-2021-0095: dotnet3.1 security and bugfix update (IMPORTANT)
ELSA-2021-0094
ELSA-2021-0094: dotnet5.0 security and bugfix update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2021-1178 ALT-PU-2021-1178: package `dotnet-bootstrap` update to version 3.1.11-alt1 | CVSS3: 7.5 | почти 6 лет назад | |
 | CVE-2020-1045 <p>A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.</p> <p>The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded.</p> <p>The security update addresses the vulnerability by fixing the way the ASP.NET Core cookie parser handles encoded names.</p> | CVSS3: 7.5 | 6% Низкий | больше 6 лет назад |
 | CVE-2020-1045 <p>A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.</p> <p>The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded.</p> <p>The security update addresses the vulnerability by fixing the way the ASP.NET Core cookie parser handles encoded names.</p> | CVSS3: 7.5 | 6% Низкий | около 6 лет назад |
 | CVE-2020-1045 Microsoft ASP.NET Core Security Feature Bypass Vulnerability | CVSS3: 7.5 | 6% Низкий | около 6 лет назад |
| CVE-2020-1045 <p>A security feature bypass vulnerability exists in the way Microsoft ... | CVSS3: 7.5 | 6% Низкий | около 6 лет назад |
| GHSA-hxrm-9w7p-39cc Cookie parsing failure | CVSS3: 7.5 | 6% Низкий | больше 4 лет назад |
| ELSA-2020-3699 ELSA-2020-3699: .NET Core 3.1 security and bugfix update (IMPORTANT) | 6% Низкий | около 6 лет назад | |
 | BDU:2020-04581 Уязвимость анализатора файлов cookie программной платформы ASP.NET Core, позволяющая нарушителю выполнить обход функций безопасности | CVSS3: 7.5 | 6% Низкий | около 6 лет назад |
| CVE-2020-1597 A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the ASP.NET Core application. The update addresses the vulnerability by correcting how the ASP.NET Core web application handles web requests. | CVSS3: 7.5 | 7% Низкий | больше 6 лет назад |
| CVE-2020-1597 A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the ASP.NET Core application. The update addresses the vulnerability by correcting how the ASP.NET Core web application handles web requests. | CVSS3: 7.5 | 7% Низкий | около 6 лет назад |
| CVE-2020-1597 ASP.NET Core Denial of Service Vulnerability | 7% Низкий | больше 6 лет назад | |
| CVE-2021-1723 ASP.NET Core and Visual Studio Denial of Service Vulnerability | CVSS3: 7.5 | 5% Низкий | почти 6 лет назад |
| CVE-2021-1723 ASP.NET Core and Visual Studio Denial of Service Vulnerability | CVSS3: 7.5 | 5% Низкий | почти 6 лет назад |
| CVE-2021-1723 ASP.NET Core and Visual Studio Denial of Service Vulnerability | CVSS3: 7.5 | 5% Низкий | почти 6 лет назад |
| GHSA-f8qx-mjcq-wfgx ASP.NET Core Denial of Service Vulnerability | CVSS3: 7.5 | 7% Низкий | больше 4 лет назад |
| ELSA-2020-3422 ELSA-2020-3422: .NET Core 3.1 security and bugfix update (IMPORTANT) | 7% Низкий | около 6 лет назад | |
| BDU:2020-04007 Уязвимость программной платформы ASP.NET Core, связанная с ошибками обработки запросов, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 7% Низкий | больше 6 лет назад |
| GHSA-242j-2gm6-5rwx ASP.NET Core and Visual Studio Denial of Service Vulnerability | CVSS3: 7.5 | 5% Низкий | больше 4 лет назад |
| ELSA-2021-0095 ELSA-2021-0095: dotnet3.1 security and bugfix update (IMPORTANT) | 5% Низкий | почти 6 лет назад | |
| ELSA-2021-0094 ELSA-2021-0094: dotnet5.0 security and bugfix update (IMPORTANT) | 5% Низкий | почти 6 лет назад |
Уязвимостей на страницу