Overview 573 matches · 4 in Waratek scope · 0 protected · 29 exploited · 13 CISA KEV · 81 public PoC · 29 EPSS ≥ 0.5
573matches
4in Waratek scope0.7%
0protected0.0%
29exploited5.1%
13CISA KEV2.3%
81public PoC14.1%
29EPSS ≥ 0.55.1%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
1
0.2%
No exploit published
3
0.5%
Outside Waratek scope
2
0.3%
Not applicable
567
99.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
573
100.0%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 101 / year
20024
Not applicable4
High1
Medium3
not blocked4
No public exploit4
20031
Not applicable1
Medium1
not blocked1
No public exploit1
20043
Outside Waratek scope1
Not applicable2
Critical1
High2
not blocked3
Exploited1
Working exploit published2
20058
Not applicable8
High1
Medium7
not blocked8
Exploited1
Working exploit published1
No public exploit6
200613
Not applicable13
High3
Medium10
not blocked13
Exploited1
Working exploit published6
No public exploit6
200715
Not applicable15
High10
Medium5
not blocked15
Working exploit published8
No public exploit7
200815
Not applicable15
High11
Medium4
not blocked15
Exploited1
Working exploit published1
No public exploit13
200931
Not applicable31
High21
Medium9
Low1
not blocked31
Exploited3
Working exploit published16
No public exploit12
201011
Not applicable11
High4
Medium6
Low1
not blocked11
Exploited1
Working exploit published3
No public exploit7
20116
Not applicable6
High4
Medium2
not blocked6
Working exploit published1
No public exploit5
201219
Not applicable19
High13
Medium6
not blocked19
Working exploit published2
No public exploit17
201320
Not applicable20
High16
Medium4
not blocked20
Exploited1
Forecast only1
No public exploit18
201418
Not applicable18
High6
Medium12
not blocked18
Exploited4
Working exploit published3
No public exploit11
201522
Not applicable22
High15
Medium6
Low1
not blocked22
Exploited1
Working exploit published6
Forecast only1
No public exploit14
20169
Not applicable9
Critical1
High6
Medium2
not blocked9
Working exploit published2
No public exploit7
201719
Not applicable19
Critical7
High9
Medium3
not blocked19
Exploited4
Working exploit published2
No public exploit13
201832
Not applicable32
Critical3
High22
Medium7
not blocked32
Working exploit published1
No public exploit31
201934
Not applicable34
Critical4
High20
Medium10
not blocked34
Exploited1
Working exploit published3
No public exploit30
202022
No exploit published2
Not applicable20
Critical3
High15
Medium4
not blocked22
Exploited3
Proof of concept only1
No public exploit18
202127
No exploit published1
Not applicable26
Critical6
High14
Medium7
not blocked27
Exploited1
Working exploit published1
Proof of concept only1
No public exploit24
202235
Not applicable35
Critical5
High21
Medium9
not blocked35
Proof of concept only3
No public exploit32
202352
Mitigation candidate1
Not applicable51
Critical7
High33
Medium12
not blocked52
Exploited3
Working exploit published1
Proof of concept only6
Forecast only1
No public exploit41
202435
Not applicable35
Critical2
High25
Medium8
not blocked35
Exploited1
Proof of concept only4
No public exploit30
202521
Not applicable21
Critical4
High14
Medium3
not blocked21
Working exploit published1
Proof of concept only1
No public exploit19
2026101
Outside Waratek scope1
Not applicable100
Critical7
High73
Medium20
Low1
not blocked101
Exploited2
Proof of concept only3
No public exploit96
2002200420062008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2023-22856 | High | 2023-03-06 | Not applicable | No public exploit | A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an upload of a specially crafted file. |
| CVE-2023-0755 | Critical | 2023-02-23 | Not applicable | No public exploit | The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code. |
| CVE-2023-0754 | Critical | 2023-02-23 | Not applicable | No public exploit | The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotely execute arbitrary code. |
| CVE-2023-21808 | High | 2023-02-14 | Not applicable | No public exploit | .NET and Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-21722 | Medium | 2023-02-14 | Not applicable | No public exploit | .NET Framework Denial of Service Vulnerability |
| CVE-2023-0650 | Medium | 2023-02-02 | Not applicable | No public exploit | A vulnerability was found in YAFNET up to 3.1.11 and classified as problematic. This issue affects some unknown processing of the component Signature Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.1.12 is able to address this issue. The identifier of the patch is a1442a2bacc3335461b44c250e81f8d99c60735f. It is recommended to upgrade the affected component. The identifier VDB-220037 was assigned to this vulnerability. |
| CVE-2023-0549 | Medium | 2023-01-27 | Not applicable | No public exploit | A vulnerability, which was classified as problematic, has been found in YAFNET up to 3.1.10. This issue affects some unknown processing of the file /forum/PostPrivateMessage of the component Private Message Handler. The manipulation of the argument subject/message leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.1.11 is able to address this issue. The identifier of the patch is 2237a9d552e258a43570bb478a92a5505e7c8797. It is recommended to upgrade the affected component. The identifier VDB-219665 was assigned to this vulnerability. |
| CVE-2022-41417 | Critical | 2023-01-18 | Not applicable | No public exploit | BlogEngine.NET v3.3.8.0 allows an attacker to create any folder with "files" prefix under ~/App_Data/. |
| CVE-2023-21538 | High | 2023-01-10 | Not applicable | No public exploit | .NET Denial of Service Vulnerability |
| CVE-2022-41418 | High | 2022-12-19 | Not applicable | No public exploit | An issue in the component BlogEngine/BlogEngine.NET/AppCode/Api/UploadController.cs of BlogEngine.NET v3.3.8.0 allows attackers to execute arbitrary code via uploading a crafted PNG file. |
| CVE-2022-47514 | High | 2022-12-18 | Not applicable | Proof of concept only | An XML external entity (XXE) injection vulnerability in XML-RPC.NET before 2.5.0 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, as demonstrated by a pingback.aspx POST request. |
| CVE-2022-41089 | High | 2022-12-13 | Not applicable | No public exploit | .NET Framework Remote Code Execution Vulnerability |
| CVE-2022-41064 | Medium | 2022-11-09 | Not applicable | No public exploit | .NET Framework Information Disclosure Vulnerability |
| CVE-2022-41479 | High | 2022-10-18 | Not applicable | Proof of concept only | The DevExpress Resource Handler (ASPxHttpHandlerModule) in DevExpress ASP.NET Web Forms Build v19.2.3 does not verify the referenced objects in the /DXR.axd?r= HTTP GET parameter. This leads to an Insecure Direct Object References (IDOR) vulnerability which allows attackers to access the application source code. NOTE: the vendor disputes this because the retrieved source code is only the DevExpress client-side application code that is, of course, intentionally readable by web browsers (a site's custom code and data is never accessible via an IDOR approach). |
| CVE-2018-18447 | Critical | 2022-10-12 | Not applicable | No public exploit | dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 2 of 2). |
| CVE-2018-18446 | Critical | 2022-10-12 | Not applicable | No public exploit | dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 1 of 2). |
| CVE-2022-41032 | High | 2022-10-11 | Not applicable | No public exploit | NuGet Client Elevation of Privilege Vulnerability |
| CVE-2022-38013 | High | 2022-09-13 | Not applicable | No public exploit | .NET Core and Visual Studio Denial of Service Vulnerability |
| CVE-2022-26929 | High | 2022-09-13 | Not applicable | No public exploit | .NET Framework Remote Code Execution Vulnerability |
| CVE-2022-36600 | Medium | 2022-09-02 | Not applicable | No public exploit | BlogEngine v3.3.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /blogengine/api/posts. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description field. |
| CVE-2022-33916 | High | 2022-08-23 | Not applicable | No public exploit | OPC UA .NET Standard Reference Server 1.04.368 allows a remote attacker to cause the application to access sensitive information. |
| CVE-2022-34716 | Medium | 2022-08-09 | Not applicable | No public exploit | .NET Spoofing Vulnerability |
| CVE-2022-29866 | High | 2022-06-16 | Not applicable | No public exploit | OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to exhaust the memory resources of a server via a crafted request that triggers Uncontrolled Resource Consumption. |
| CVE-2022-29865 | High | 2022-06-16 | Not applicable | No public exploit | OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials. |
| CVE-2022-29864 | High | 2022-06-16 | Not applicable | No public exploit | OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to cause a server to crash via a large number of messages that trigger Uncontrolled Resource Consumption. |
| CVE-2022-29863 | High | 2022-06-16 | Not applicable | No public exploit | OPC UA .NET Standard Stack 1.04.368 allows remote attacker to cause a crash via a crafted message that triggers excessive memory allocation. |
| CVE-2022-29862 | High | 2022-06-16 | Not applicable | No public exploit | An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to hang via a crafted message. |
| CVE-2022-30184 | Medium | 2022-06-15 | Not applicable | No public exploit | .NET and Visual Studio Information Disclosure Vulnerability |
| CVE-2022-29875 | Critical | 2022-06-01 | Not applicable | No public exploit | A vulnerability has been identified in Biograph Horizon PET/CT Systems (All VJ30 versions < VJ30C-UD01), MAGNETOM Family (NUMARIS X: VA12M, VA12S, VA10B, VA20A, VA30A, VA31A), MAMMOMAT Revelation (All VC20 versions < VC20D), NAEOTOM Alpha (All VA40 versions < VA40 SP2), SOMATOM X.cite (All versions < VA30 SP5 or VA40 SP2), SOMATOM X.creed (All versions < VA30 SP5 or VA40 SP2), SOMATOM go.All (All versions < VA30 SP5 or VA40 SP2), SOMATOM go.Now (All versions < VA30 SP5 or VA40 SP2), SOMATOM go.Open Pro (All versions < VA30 SP5 or VA40 SP2), SOMATOM go.Sim (All versions < VA30 SP5 or VA40 SP2), SOMATOM go.Top (All versions < VA30 SP5 or VA40 SP2), SOMATOM go.Up (All versions < VA30 SP5 or VA40 SP2), Symbia E/S (All VB22 versions < VB22A-UD03), Symbia Evo (All VB22 versions < VB22A-UD03), Symbia Intevo (All VB22 versions < VB22A-UD03), Symbia T (All VB22 versions < VB22A-UD03), Symbia.net (All VB22 versions < VB22A-UD03), syngo.via VB10 (All versions), syngo.via VB20 (All versions), syngo.via VB30 (All versions), syngo.via VB40 (All versions < VB40B HF06), syngo.via VB50 (All versions), syngo.via VB60 (All versions < VB60B HF02). The application deserialises untrusted data without sufficient validations that could result in an arbitrary deserialization. This could allow an unauthenticated attacker to execute code in the affected system if ports 32912/tcp or 32914/tcp are reachable. |
| CVE-2022-29245 | Medium | 2022-05-31 | Not applicable | Proof of concept only | SSH.NET is a Secure Shell (SSH) library for .NET. In versions 2020.0.0 and 2020.0.1, during an `X25519` key exchange, the client’s private key is generated with `System.Random`. `System.Random` is not a cryptographically secure random number generator, it must therefore not be used for cryptographic purposes. When establishing an SSH connection to a remote host, during the X25519 key exchange, the private key is generated with a weak random number generator whose seed can be brute forced. This allows an attacker who is able to eavesdrop on the communications to decrypt them. Version 2020.0.2 contains a patch for this issue. As a workaround, one may disable support for `curve25519-sha256` and `curve25519-sha256@libssh.org` key exchange algorithms. |
| CVE-2022-28921 | Medium | 2022-05-18 | Not applicable | No public exploit | A Cross-Site Request Forgery (CSRF) vulnerability discovered in BlogEngine.Net v3.3.8.0 allows unauthenticated attackers to read arbitrary files on the hosting web server. |
| CVE-2022-25591 | Critical | 2022-05-13 | Not applicable | No public exploit | BlogEngine.NET v3.3.8.0 was discovered to contain an arbitrary file deletion vulnerability which allows attackers to delete files within the web server root directory via a crafted HTTP request. |
| CVE-2022-30130 | Medium | 2022-05-10 | Not applicable | No public exploit | .NET Framework Denial of Service Vulnerability |
| CVE-2022-29145 | High | 2022-05-10 | Not applicable | No public exploit | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2022-29117 | High | 2022-05-10 | Not applicable | No public exploit | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2022-23267 | High | 2022-05-10 | Not applicable | No public exploit | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2022-26907 | Medium | 2022-04-15 | Not applicable | No public exploit | Azure SDK for .NET Information Disclosure Vulnerability |
| CVE-2022-26832 | High | 2022-04-15 | Not applicable | No public exploit | .NET Framework Denial of Service Vulnerability |
| CVE-2022-24512 | Medium | 2022-03-09 | Not applicable | No public exploit | .NET and Visual Studio Remote Code Execution Vulnerability |
| CVE-2022-24464 | High | 2022-03-09 | Not applicable | No public exploit | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2022-21986 | High | 2022-02-09 | Not applicable | No public exploit | .NET Denial of Service Vulnerability |
| CVE-2021-41609 | Critical | 2022-01-28 | Not applicable | No public exploit | SQL injection in the ID parameter of the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to retrieve data from the application's backend database via boolean-based blind and UNION injection. |
| CVE-2021-41608 | High | 2022-01-28 | Not applicable | No public exploit | A file disclosure vulnerability in the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to retrieve survey user submitted data by modifying the value of the ID parameter in sequential order beginning from 1. |
| CVE-2022-21911 | High | 2022-01-11 | Not applicable | No public exploit | .NET Framework Denial of Service Vulnerability |
| CVE-2021-43853 | High | 2021-12-22 | Not applicable | No public exploit | Ajax.NET Professional (AjaxPro) is an AJAX framework available for Microsoft ASP.NET. Affected versions of this package are vulnerable to JavaScript object injection which may result in cross site scripting when leveraged by a malicious user. The affected core relates to JavaScript object creation when parsing json input. Releases before version 21.12.22.1 are affected. A workaround exists that replaces one of the core JavaScript files embedded in the library. See the GHSA-5q7q-qqw2-hjq7 for workaround details. |
| CVE-2021-43877 | High | 2021-12-15 | Not applicable | No public exploit | ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability |
| CVE-2021-23758 | Critical | 2021-12-03 | Not applicable | Exploited | All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution. |
| CVE-2021-41355 | Medium | 2021-10-13 | Not applicable | No public exploit | .NET Core and Visual Studio Information Disclosure Vulnerability |
| CVE-2021-23445 | Medium | 2021-09-27 | Not applicable | Proof of concept only | This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped. |
| CVE-2021-23428 | Critical | 2021-09-01 | Not applicable | No public exploit | This affects all versions of package elFinder.NetCore. The Path.Combine(...) method is used to create an absolute file path. Due to missing sanitation of the user input and a missing check of the generated path its possible to escape the Files directory via path traversal |
| CVE-2021-23427 | Critical | 2021-09-01 | Not applicable | No public exploit | This affects all versions of package elFinder.NetCore. The ExtractAsync function within the FileSystem is vulnerable to arbitrary extraction due to insufficient validation. |
| CVE-2021-34745 | High | 2021-08-18 | Not applicable | No public exploit | A vulnerability in the AppDynamics .NET Agent for Windows could allow an attacker to leverage an authenticated, local user account to gain SYSTEM privileges. This vulnerability is due to the .NET Agent Coordinator Service executing code with SYSTEM privileges. An attacker with local access to a device that is running the vulnerable agent could create a custom process that would be launched with those SYSTEM privileges. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system. This vulnerability is fixed in AppDynamics .NET Agent Release 21.7. |
| CVE-2021-34532 | Medium | 2021-08-12 | Not applicable | No public exploit | ASP.NET Core and Visual Studio Information Disclosure Vulnerability |
| CVE-2021-34485 | Medium | 2021-08-12 | Not applicable | No public exploit | .NET Core and Visual Studio Information Disclosure Vulnerability |
| CVE-2021-26423 | High | 2021-08-12 | Not applicable | No public exploit | .NET Core and Visual Studio Denial of Service Vulnerability |
| CVE-2021-34477 | High | 2021-07-14 | Not applicable | No public exploit | Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability |
| CVE-2021-23407 | High | 2021-07-14 | Not applicable | No public exploit | This affects the package elFinder.Net.Core from 0 and before 1.2.4. The user-controlled file name is not properly sanitized before it is used to create a file system path. |
| CVE-2021-34110 | High | 2021-07-08 | Not applicable | Working exploit published | WinWaste.NET version 1.0.6183.16475 has incorrect permissions, allowing a local unprivileged user to replace the executable with a malicious file that will be executed with "LocalSystem" privileges. |
| CVE-2020-27383 | High | 2021-06-09 | Not applicable | No public exploit | Battle.net.exe in Battle.Net 1.27.1.12428 suffers from an elevation of privileges vulnerability which can be used by an "Authenticated User" to modify the existing executable file with a binary of his choice. The vulnerability exist due to weak set of permissions being granted to the "Authenticated Users Group" which grants the (F) Flag aka "Full Control" |
| CVE-2021-31957 | High | 2021-06-08 | Not applicable | No public exploit | ASP.NET Core Denial of Service Vulnerability |
| CVE-2021-27434 | High | 2021-05-20 | Not applicable | No public exploit | Products with Unified Automation .NET based OPC UA Client/Server SDK Bundle: Versions V3.0.7 and prior (.NET 4.5, 4.0, and 3.5 Framework versions only) are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow. |
| CVE-2021-27432 | High | 2021-05-20 | Not applicable | No public exploit | OPC Foundation UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow. |
| CVE-2020-15522 | Medium | 2021-05-20 | No exploit published | No public exploit | Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing information for the generation of multiple deterministic ECDSA signatures. |
| CVE-2021-31204 | High | 2021-05-11 | Not applicable | No public exploit | .NET and Visual Studio Elevation of Privilege Vulnerability |
| CVE-2021-28141 | Critical | 2021-03-11 | Not applicable | No public exploit | An issue was discovered in Progress Telerik UI for ASP.NET AJAX 2021.1.224. It allows unauthorized access to MicrosoftAjax.js through the Telerik.Web.UI.WebResource.axd file. This may allow the attacker to gain unauthorized access to the server and execute code. To exploit, one must use the parameter _TSM_HiddenField_ and inject a command at the end of the URI. NOTE: the vendor states that this is not a vulnerability. The request's output does not indicate that a "true" command was executed on the server, and the request's output does not leak any private source code or data from the server |
| CVE-2021-26701 | Critical | 2021-02-25 | Not applicable | No public exploit | .NET Core Remote Code Execution Vulnerability |
| CVE-2021-24112 | Critical | 2021-02-25 | Not applicable | No public exploit | .NET Core Remote Code Execution Vulnerability |
| CVE-2021-24111 | High | 2021-02-25 | Not applicable | No public exploit | .NET Framework Denial of Service Vulnerability |
| CVE-2021-1721 | Medium | 2021-02-25 | Not applicable | No public exploit | .NET Core and Visual Studio Denial of Service Vulnerability |
| CVE-2020-29457 | Medium | 2021-02-16 | Not applicable | No public exploit | A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 could allow a rogue application to establish a secure connection. |
| CVE-2021-1723 | High | 2021-01-12 | Not applicable | No public exploit | ASP.NET Core and Visual Studio Denial of Service Vulnerability |
| CVE-2020-28458 | High | 2020-12-16 | Not applicable | Proof of concept only | All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806. |
| CVE-2020-16937 | Medium | 2020-10-16 | Not applicable | No public exploit | <p>An information disclosure vulnerability exists when the .NET Framework improperly handles objects in memory. An attacker who successfully exploited the vulnerability could disclose contents of an affected system's memory.</p> <p>To exploit the vulnerability, an authenticated attacker would need to run a specially crafted application.</p> <p>The update addresses the vulnerability by correcting how the .NET Framework handles objects in memory.</p> |
| CVE-2020-8927 | Medium | 2020-09-15 | Not applicable | No public exploit | A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the "streaming" API as opposed to the "one-shot" API, and impose chunk size limits. |
| CVE-2020-1045 | High | 2020-09-11 | Not applicable | No public exploit | <p>A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.</p> <p>The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded.</p> <p>The security update addresses the vulnerability by fixing the way the ASP.NET Core cookie parser handles encoded names.</p> |
| CVE-2020-1597 | High | 2020-08-17 | Not applicable | No public exploit | A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the ASP.NET Core application. The update addresses the vulnerability by correcting how the ASP.NET Core web application handles web requests. |
| CVE-2020-1476 | Medium | 2020-08-17 | Not applicable | No public exploit | An elevation of privilege vulnerability exists when ASP.NET or .NET web applications running on IIS improperly allow access to cached files. An attacker who successfully exploited this vulnerability could gain access to restricted files. To exploit this vulnerability, an attacker would need to send a specially crafted request to an affected server. The update addresses the vulnerability by changing how ASP.NET and .NET handle requests. |
| CVE-2020-1046 | High | 2020-08-17 | Not applicable | No public exploit | A remote code execution vulnerability exists when Microsoft .NET Framework processes input. An attacker who successfully exploited this vulnerability could take control of an affected system. To exploit the vulnerability, an attacker would need to be able to upload a specially crafted file to a web application. The security update addresses the vulnerability by correcting how .NET Framework processes input. |
| CVE-2020-22721 | High | 2020-08-14 | Not applicable | No public exploit | A File Upload Vulnerability in PNotes - Andrey Gruber PNotes.NET v3.8.1.2 allows a local attacker to execute arbitrary code via the Miscellaneous " External Programs by uploading the malicious .exe file to the external program. |
| CVE-2020-1147 | High | 2020-07-14 | Not applicable | Exploited | A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'. |
| CVE-2020-1161 | High | 2020-05-21 | Not applicable | No public exploit | A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the ASP.NET Core application. The update addresses the vulnerability by correcting how the ASP.NET Core web application handles web requests. |
| CVE-2020-1108 | High | 2020-05-21 | Not applicable | No public exploit | A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Core or .NET Framework web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET Core or .NET Framework application. The update addresses the vulnerability by correcting how the .NET Core or .NET Framework web application handles web requests. |
| CVE-2020-1066 | High | 2020-05-21 | Not applicable | Exploited | An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level. To exploit the vulnerability, an attacker would first have to access the local machine, and then run a malicious program. The update addresses the vulnerability by correcting how .NET Framework activates COM objects. |
| CVE-2020-8867 | High | 2020-04-22 | Not applicable | No public exploit | This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Standard 1.04.358.30. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of sessions. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to create a denial-of-service condition against the application. Was ZDI-CAN-10295. |
| CVE-2019-20627 | Critical | 2020-03-23 | Not applicable | No public exploit | AutoUpdater.cs in AutoUpdater.NET before 1.5.8 allows XXE. |
| CVE-2019-19135 | High | 2020-03-16 | No exploit published | No public exploit | In OPC Foundation OPC UA .NET Standard codebase 1.4.357.28, servers do not create sufficiently random numbers in OPCFoundation.NetStandard.Opc.Ua before 1.4.359.31, which allows man in the middle attackers to reuse encrypted user credentials sent over the network. |
| CVE-2019-10797 | Medium | 2020-02-19 | No exploit published | No public exploit | Netty in WSO2 transport-http before v6.3.1 is vulnerable to HTTP Response Splitting due to HTTP Header validation being disabled. |
| CVE-2014-4172 | Critical | 2020-01-24 | Not applicable | No public exploit | A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before 1.0.2, and phpCAS before 1.3.3 that allow remote attackers to inject arbitrary web script or HTML via the (1) service parameter to validation/AbstractUrlBasedTicketValidator.java or (2) pgtUrl parameter to validation/Cas20ServiceTicketValidator.java. |
| CVE-2020-0646 | Critical | 2020-01-14 | Not applicable | Exploited | A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'. |
| CVE-2020-0606 | High | 2020-01-14 | Not applicable | No public exploit | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0605. |
| CVE-2020-0605 | High | 2020-01-14 | Not applicable | No public exploit | A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0606. |
| CVE-2020-0603 | High | 2020-01-14 | Not applicable | No public exploit | A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka 'ASP.NET Core Remote Code Execution Vulnerability'. |
| CVE-2020-0602 | High | 2020-01-14 | Not applicable | No public exploit | A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'. |
| CVE-2019-19790 | Critical | 2019-12-13 | Not applicable | No public exploit | Path traversal in RadChart in Telerik UI for ASP.NET AJAX allows a remote attacker to read and delete an image with extension .BMP, .EXIF, .GIF, .ICON, .JPEG, .PNG, .TIFF, or .WMF on the server through a specially crafted request. NOTE: RadChart was discontinued in 2014 in favor of RadHtmlChart. All RadChart versions were affected. To avoid this vulnerability, you must remove RadChart's HTTP handler from a web.config (its type is Telerik.Web.UI.ChartHttpHandler). |
| CVE-2019-18935 | Critical | 2019-12-11 | Not applicable | Exploited | Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function. This is exploitable when the encryption keys are known due to the presence of CVE-2017-11317 or CVE-2017-11357, or other means. Exploitation can result in remote code execution. (As of 2020.1.114, a default setting prevents the exploit. In 2019.3.1023, but not earlier versions, a non-default setting can prevent exploitation.) |
| CVE-2019-18636 | Medium | 2019-11-01 | Not applicable | No public exploit | A cross-site scripting (XSS) vulnerability in Jitbit .NET Forum (aka ASP.NET forum) 8.3.8 allows remote attackers to inject arbitrary web script or HTML via the gravatar URL parameter. |
| CVE-2019-16251 | Medium | 2019-10-31 | Not applicable | No public exploit | plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes. |
| CVE-2019-16929 | High | 2019-10-08 | Not applicable | No public exploit | Auth0 auth0.net before 6.5.4 has Incorrect Access Control because IdentityTokenValidator can be accidentally used to validate untrusted ID tokens. |
| CVE-2019-1302 | High | 2019-09-11 | Not applicable | No public exploit | An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests, aka 'ASP.NET Core Elevation Of Privilege Vulnerability'. |
| CVE-2019-1301 | High | 2019-09-11 | Not applicable | No public exploit | A denial of service vulnerability exists when .NET Core improperly handles web requests, aka '.NET Core Denial of Service Vulnerability'. |