AS
Product
Asp.net
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 0Low 0
Watch
Add Asp.net to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2004-0847 | 9.8 | Nov 3 | The Microsoft .NET forms authentication capability for ASP.NET allows remote attackers to bypass authentication for .aspx files in restricted directories via a request containing… Affected: through 1.1; 1.1 |
| CVE-2006-1364 | 7.5 | Mar 23 | Microsoft w3wp (aka w3wp.exe) does not properly handle when the AspCompat directive is not used when referencing COM components in ASP.NET, which allows remote attackers to cause… Affected: through 1.1; 1.1 |
| CVE-2010-2088 | – | May 27 | ASP.NET in Microsoft .NET 3.5 does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting (XSS) attacks against the form… Affected: 3.5 |
| CVE-2010-2084 | – | May 27 | Microsoft ASP.NET 2.0 does not prevent setting the InnerHtml property on a control that inherits from HtmlContainerControl, which allows remote attackers to conduct cross-site… Affected: 2.0 |
| CVE-2005-2224 | – | Jul 12 | aspnet_wp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a crafted SOAP message to an… Affected: All versions, or not specified |
| CVE-2005-1665 | – | May 18 | The __VIEWSTATE functionality in Microsoft ASP.NET 1.x, when not cryptographically signed, allows remote attackers to cause a denial of service (CPU consumption) via deeply nested… Affected: 1.0; 1.1 |
| CVE-2005-1664 | – | May 18 | The __VIEWSTATE functionality in Microsoft ASP.NET 1.x allows remote attackers to conduct replay attacks to (1) apply a ViewState generated from one view to a different view, (2)… Affected: 1.0; 1.1 |
| CVE-2005-0452 | – | Feb 16 | Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attackers to inject arbitrary HTML or web script via Unicode… Affected: 1.0; 1.0; 1.0; 1.1; 1.1 |
| CVE-2003-0768 | – | Sep 22 | Microsoft ASP.Net 1.1 allows remote attackers to bypass the Cross-Site Scripting (XSS) and Script Injection protection feature via a null character in the beginning of a tag name Affected: 1.1 |
Showing 9