NF
Product
.NET Framework
On CISA KEVExploited in the wild
207
CVEs
5
On KEV
9.8
Max CVSS
5
New 30D
Severity mix
Critical 7High 91Medium 15Low 1
Watch
Add .NET Framework to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2006-1511 | – | Mar 30 | Buffer overflow in the ILASM assembler in the Microsoft .NET 1.0 and 1.1 Framework might allow user-assisted attackers to execute arbitrary code via a .il file that calls a… Affected: 1.0; 1.0; 1.0; 1.1; 1.1 |
| CVE-2006-1510 | – | Mar 30 | Buffer overflow in calloc.c in the Microsoft Windows XP SP2 ntdll.dll system library, when used by the ILDASM disassembler in the Microsoft .NET 1.0 and 1.1 SDK, might allow… Affected: 1.0; 1.0; 1.0; 1.1; 1.1 |
| CVE-2005-2127 | – | Aug 19 | Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with… Affected: 1.1; 1.1; 1.1; 1.1 |
| CVE-2005-0509 | – | Mar 14 | Multiple cross-site scripting (XSS) vulnerabilities in the Mono 1.0.5 implementation of ASP.NET (.Net) allow remote attackers to inject arbitrary HTML or web script via Unicode… Affected: 1.0; 1.0; 1.0; 1.1; 1.1 |
| CVE-2004-0200 | – | Sep 28 | Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code… Affected: 1.0 |
| CVE-2002-0409 | – | Jul 26 | orderdetails.aspx, as made available to Microsoft .NET developers as example code and demonstrated on www.ibuyspystore.com, allows remote attackers to view the orders of other… Affected: 1.0 |
| CVE-2002-0369 | – | Jul 26 | Buffer overflow in ASP.NET Worker Process allows remote attackers to cause a denial of service (restart) and possibly execute arbitrary code via a routine that processes cookies… Affected: 1.0 |