ASP NET Core

DATE	CVE	VULNERABILITY TITLE	RISK
2023-11-14	CVE-2023-36038	Unspecified vulnerability in Microsoft Asp.Net Core and Visual Studio 2022 ASP.NET Core Denial of Service Vulnerability network low complexity microsoft	7.5
2023-11-14	CVE-2023-36558	Unspecified vulnerability in Microsoft .Net and Visual Studio 2022 ASP.NET Core - Security Feature Bypass Vulnerability local low complexity microsoft	5.5
2023-10-10	CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. network low complexity ietf nghttp2 netty envoyproxy eclipse caddyserver golang f5 apache apple grpc microsoft nodejs dena facebook amazon debian kazu-yamamoto istio varnish-cache-project traefik projectcontour linkerd linecorp redhat fedoraproject netapp akka konghq jenkins openresty cisco	7.5
2023-08-08	CVE-2023-35391	Unspecified vulnerability in Microsoft .Net ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability network low complexity microsoft	7.5
2020-08-17	CVE-2020-1597	A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. network low complexity microsoft fedoraproject	7.5
2020-05-21	CVE-2020-1161	Unspecified vulnerability in Microsoft Asp.Net Core and Visual Studio 2017 A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'. network low complexity microsoft	7.5
2020-01-14	CVE-2020-0603	Out-of-bounds Write vulnerability in multiple products A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka 'ASP.NET Core Remote Code Execution Vulnerability'. network low complexity microsoft redhat CWE-787	8.8
2020-01-14	CVE-2020-0602	A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'. network low complexity microsoft redhat	7.5
2019-09-11	CVE-2019-1302	Improper Input Validation vulnerability in Microsoft Asp.Net Core 2.1/2.2/3.0 An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests, aka 'ASP.NET Core Elevation Of Privilege Vulnerability'. network low complexity microsoft CWE-20	8.8
2019-07-15	CVE-2019-1075	Open Redirect vulnerability in Microsoft Asp.Net Core 2.1/2.2 A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'. network low complexity microsoft CWE-601	6.1