AC
Product
Asp.net Core
On CISA KEVExploited in the wild
41
CVEs
2
On KEV
9.9
Max CVSS
1
New 30D
Severity mix
Critical 3High 31Medium 7Low 0
Watch
Add Asp.net Core to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-8416 | 6.5 | Nov 14 | A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1 Affected: 2.1 |
| CVE-2018-0785 | 6.5 | Jan 10 | ASP.NET Core 1.0. 1.1, and 2.0 allow a cross site request forgery vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core Cross Site Request Forgery… Affected: 2.0 |
| CVE-2019-1075 | 6.1 | Jul 15 | A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability' Affected: 2.1; 2.2 |
| CVE-2026-69304 | 5.9 | Sep 8 | ASP.NET Core Denial of Service Vulnerability Affected: 8.0.0 before 8.0.28; 9.0.0 before 9.0.17; 10.0.0 before 10.0.9; after 11.0.0 and later; 11.0 |
| CVE-2023-36558 | 5.5 | Nov 14 | ASP.NET Core Security Feature Bypass Vulnerability Affected: 6.0.0 before 6.0.25; 7.0.0 before 7.0.14; 8.0.0 |
| CVE-2021-34532 | 5.5 | Aug 12 | ASP.NET Core and Visual Studio Information Disclosure Vulnerability Affected: 2.1 through 2.1.2; 3.1 through 3.1.17; 5.0 through 5.0.8 |
| CVE-2018-8356 | 5.5 | Jul 11 | A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass… Affected: 1.0; 1.1; 2.0 |
Showing 7