High

DATE	CVE	VULNERABILITY TITLE	RISK
2020-07-14	CVE-2020-1147	Unspecified vulnerability in Microsoft products A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'. local low complexity microsoft	7.8
2020-05-21	CVE-2020-1108	Unspecified vulnerability in Microsoft products A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Core & .NET Framework Denial of Service Vulnerability'. network low complexity microsoft	7.5
2020-01-14	CVE-2020-0606	Improper Input Validation vulnerability in Microsoft .Net Core and .Net Framework A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'. network low complexity microsoft CWE-20	8.8
2020-01-14	CVE-2020-0605	Improper Input Validation vulnerability in Microsoft .Net Core and .Net Framework A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'. network low complexity microsoft CWE-20	8.8
2019-09-11	CVE-2019-1301	Unspecified vulnerability in Microsoft .Net Core and Powershell Core A denial of service vulnerability exists when .NET Core improperly handles web requests, aka '.NET Core Denial of Service Vulnerability'. network low complexity microsoft	7.5
2019-05-16	CVE-2019-0981	Data Processing Errors vulnerability in Microsoft .Net Core and .Net Framework A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. network low complexity microsoft CWE-19	7.5
2019-05-16	CVE-2019-0980	Data Processing Errors vulnerability in Microsoft .Net Core and .Net Framework A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. network low complexity microsoft CWE-19	7.5
2019-05-16	CVE-2019-0820	Resource Exhaustion vulnerability in multiple products A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. network low complexity microsoft redhat CWE-400	7.5
2019-01-08	CVE-2019-0545	Information Exposure vulnerability in Microsoft .Net Core and .Net Framework An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7/4.7.1/4.7.2, .NET Core 2.1, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET Core 2.2, Microsoft .NET Framework 4.7.2. network low complexity microsoft CWE-200	7.5
2018-09-13	CVE-2018-8409	Unspecified vulnerability in Microsoft .Net Core, Asp.Net Core and System.Io.Pipelines A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1. network low complexity microsoft	7.5