High

DATE	CVE	VULNERABILITY TITLE	RISK
2024-02-13	CVE-2024-21386	Unspecified vulnerability in Microsoft Asp.Net Core and Visual Studio 2022 .NET Denial of Service Vulnerability network low complexity microsoft	7.5
2024-02-13	CVE-2024-21404	Unspecified vulnerability in Microsoft Asp.Net Core and Visual Studio 2022 .NET Denial of Service Vulnerability network low complexity microsoft	7.5
2023-11-14	CVE-2023-36038	Unspecified vulnerability in Microsoft Asp.Net Core and Visual Studio 2022 ASP.NET Core Denial of Service Vulnerability network low complexity microsoft	7.5
2023-10-10	CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. network low complexity ietf nghttp2 netty envoyproxy eclipse caddyserver golang f5 apache apple grpc microsoft nodejs dena facebook amazon debian kazu-yamamoto istio varnish-cache-project traefik projectcontour linkerd linecorp redhat fedoraproject netapp akka konghq jenkins openresty cisco	7.5
2023-08-08	CVE-2023-35391	Unspecified vulnerability in Microsoft .Net and Visual Studio 2022 ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability network low complexity microsoft	7.5
2023-08-08	CVE-2023-38180	.NET and Visual Studio Denial of Service Vulnerability network low complexity microsoft fedoraproject	7.5
2021-12-15	CVE-2021-43877	Unspecified vulnerability in Microsoft products ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability local low complexity microsoft	8.8
2021-01-12	CVE-2021-1723	ASP.NET Core and Visual Studio Denial of Service Vulnerability network low complexity microsoft fedoraproject	7.5
2020-09-11	CVE-2020-1045	<p>A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.</p> <p>The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded.</p> <p>The security update addresses the vulnerability by fixing the way the ASP.NET Core cookie parser handles encoded names.</p> network low complexity microsoft fedoraproject redhat	7.5
2020-08-17	CVE-2020-1597	A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. network low complexity microsoft fedoraproject	7.5