Overview 160 matches · 2 in Waratek scope · 0 protected · 6 exploited · 0 CISA KEV · 25 public PoC · 3 EPSS ≥ 0.5
160matches
2in Waratek scope1.2%
0protected0.0%
6exploited3.8%
0CISA KEV0.0%
25public PoC15.6%
3EPSS ≥ 0.51.9%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
2
1.2%
Outside Waratek scope
0
0.0%
Not applicable
158
98.8%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
160
100.0%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 20 / year
20023
Not applicable3
Medium3
not blocked3
No public exploit3
20031
Not applicable1
Medium1
not blocked1
No public exploit1
20040
20057
Not applicable7
Medium7
not blocked7
Working exploit published1
No public exploit6
200610
Not applicable10
Medium10
not blocked10
Exploited1
Working exploit published4
No public exploit5
20075
Not applicable5
Medium5
not blocked5
Working exploit published3
No public exploit2
20084
Not applicable4
Medium4
not blocked4
No public exploit4
20099
Not applicable9
Medium9
not blocked9
Working exploit published7
No public exploit2
20106
Not applicable6
Medium6
not blocked6
Exploited1
Working exploit published2
No public exploit3
20112
Not applicable2
Medium2
not blocked2
No public exploit2
20126
Not applicable6
Medium6
not blocked6
Working exploit published1
No public exploit5
20134
Not applicable4
Medium4
not blocked4
No public exploit4
201412
Not applicable12
Medium12
not blocked12
Exploited4
Working exploit published1
No public exploit7
20156
Not applicable6
Medium6
not blocked6
Forecast only1
No public exploit5
20162
Not applicable2
Medium2
not blocked2
Working exploit published1
No public exploit1
20173
Not applicable3
Medium3
not blocked3
No public exploit3
20187
Not applicable7
Medium7
not blocked7
No public exploit7
201910
Not applicable10
Medium10
not blocked10
No public exploit10
20204
No exploit published1
Not applicable3
Medium4
not blocked4
No public exploit4
20217
No exploit published1
Not applicable6
Medium7
not blocked7
Proof of concept only1
No public exploit6
20229
Not applicable9
Medium9
not blocked9
Proof of concept only1
No public exploit8
202312
Not applicable12
Medium12
not blocked12
Working exploit published1
Proof of concept only2
No public exploit9
20248
Not applicable8
Medium8
not blocked8
Proof of concept only1
No public exploit7
20253
Not applicable3
Medium3
not blocked3
No public exploit3
202620
Not applicable20
Medium20
not blocked20
Proof of concept only1
No public exploit19
2002200420062008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-69304 | Medium | 2026-09-08 | Not applicable | No public exploit | Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
| CVE-2026-58649 | Medium | 2026-09-08 | Not applicable | No public exploit | Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-62902 | Medium | 2026-08-11 | Not applicable | No public exploit | Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-62900 | Medium | 2026-08-11 | Not applicable | No public exploit | Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-62899 | Medium | 2026-08-11 | Not applicable | No public exploit | Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-14932 | Medium | 2026-07-22 | Not applicable | No public exploit | In Progress® Telerik® UI for AJAX prior to v2026.2.708, the obsolete RadChart component's ChartImage.axd handler is vulnerable to unauthenticated file read and deletion of image-extension files within the application directory. |
| CVE-2026-14865 | Medium | 2026-07-22 | Not applicable | No public exploit | In Progress® Telerik® UI for AJAX prior to v2026.2.708, the internal LayoutBuilder control processes client-state XML without disabling DTD processing, allowing unauthenticated denial of service via recursive XML entity expansion. |
| CVE-2026-13192 | Medium | 2026-07-22 | Not applicable | No public exploit | In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of content submitted to the RadEditor PDF export feature may allow an authenticated attacker to trigger server-side requests to arbitrary hosts, resulting in outbound network connections and potential exposure of Windows authentication credentials. |
| CVE-2026-13188 | Medium | 2026-07-22 | Not applicable | No public exploit | In Progress® Telerik® UI for AJAX prior to v2026.2.708, DialogHandler request parameters may be tampered with, potentially altering dialog server-side behavior and enabling chained exploitation. |
| CVE-2026-50659 | Medium | 2026-07-14 | Not applicable | No public exploit | Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-47898 | Medium | 2026-07-03 | Not applicable | No public exploit | Improper Restriction of XML External Entity Reference vulnerability in Apache Lucene.Net (Lucene.Net.Analysis.Common library). This issue affects Apache Lucene.Net.Analysis.Common: from 4.8.0-beta00005 before 4.8.0-beta00018. Users are recommended to upgrade to version 4.8.0-beta00018, which fixes the issue. |
| CVE-2026-45491 | Medium | 2026-06-09 | Not applicable | No public exploit | Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally. |
| CVE-2026-32175 | Medium | 2026-05-12 | Not applicable | No public exploit | A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories. To exploit the vulnerability, an attacker must send a specially crafted file to a vulnerable system. The security update fixes the vulnerability by ensuring .NET Core properly handles files. |
| CVE-2026-32226 | Medium | 2026-04-14 | Not applicable | No public exploit | Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an unauthorized attacker to deny service over a network. |
| CVE-2026-3263 | Medium | 2026-02-26 | Not applicable | Proof of concept only | A vulnerability was found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected by this vulnerability is an unknown functionality of the file /api/Security/ of the component Security API. Performing a manipulation results in improper authorization. Remote exploitation of the attack is possible. The vendor was contacted early about this disclosure but did not respond in any way. |
| CVE-2026-27799 | Medium | 2026-02-26 | Not applicable | No public exploit | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exists in the DJVU image format handler. The vulnerability occurs due to integer truncation when calculating the stride (row size) for pixel buffer allocation. The stride calculation overflows a 32-bit signed integer, resulting in an out-of-bounds memory reads. Versions 7.1.2-15 and 6.9.13-40 contain a patch. |
| CVE-2026-2878 | Medium | 2026-02-25 | Not applicable | No public exploit | In Progress® Telerik® UI for AJAX, versions prior to 2026.1.225, an insufficient entropy vulnerability exists in RadAsyncUpload, where a predictable temporary identifier, based on timestamp and filename, can enable collisions and file content tampering. |
| CVE-2026-25637 | Medium | 2026-02-24 | Not applicable | No public exploit | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak in the ASHLAR image writer allows an attacker to exhaust process memory by providing a crafted image that results in small objects that are allocated but never freed. Version 7.1.2-15 contains a patch. |
| CVE-2026-25576 | Medium | 2026-02-24 | Not applicable | No public exploit | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exists in multiple raw image format handles. The vulnerability occurs when processing images with -extract dimensions larger than -size dimensions, causing out-of-bounds memory reads from a heap-allocated buffer. Versions 7.1.2-15 and 6.9.13-40 contain a patch. |
| CVE-2026-24484 | Medium | 2026-02-24 | Not applicable | No public exploit | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for multi-layer nested mvg conversions to svg, leading to DoS. Versions 7.1.2-15 and 6.9.13-40 contain a patch. |
| CVE-2025-55248 | Medium | 2025-10-14 | Not applicable | No public exploit | Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network. |
| CVE-2025-49015 | Medium | 2025-06-18 | Not applicable | No public exploit | The Couchbase .NET SDK (client library) before 3.7.1 does not properly enable hostname verification for TLS certificates. In fact, the SDK was also using IP addresses instead of hostnames due to a configuration option that was incorrectly enabled by default. |
| CVE-2024-42513 | Medium | 2025-02-10 | Not applicable | No public exploit | Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints. |
| CVE-2024-38167 | Medium | 2024-08-13 | Not applicable | No public exploit | .NET and Visual Studio Information Disclosure Vulnerability |
| CVE-2024-7323 | Medium | 2024-08-02 | Not applicable | No public exploit | Digiwin EasyFlow .NET lacks proper access control for specific functionality, and the functionality do not adequately filter user input. A remote attacker with regular privilege can exploit this vulnerability to download arbitrary files from the remote server . |
| CVE-2024-30046 | Medium | 2024-05-14 | Not applicable | No public exploit | Visual Studio Denial of Service Vulnerability |
| CVE-2024-30045 | Medium | 2024-05-14 | Not applicable | No public exploit | .NET and Visual Studio Remote Code Execution Vulnerability |
| CVE-2024-28917 | Medium | 2024-04-09 | Not applicable | No public exploit | Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability |
| CVE-2023-36483 | Medium | 2024-03-16 | Not applicable | Proof of concept only | Authorization bypass can be achieved by session ID prediction in MASmobile Classic Android version 1.16.18 and earlier and MASmobile Classic iOS version 1.7.24 and earlier which allows remote attackers to retrieve sensitive data including customer data, security system status, and event history. |
| CVE-2024-21319 | Medium | 2024-01-09 | Not applicable | No public exploit | Microsoft Identity Denial of service vulnerability |
| CVE-2023-51652 | Medium | 2024-01-02 | Not applicable | No public exploit | OWASP AntiSamy .NET is a library for performing cleansing of HTML coming from untrusted sources. Prior to version 1.2.0, there is a potential for a mutation cross-site scripting (mXSS) vulnerability in AntiSamy caused by flawed parsing of the HTML being sanitized. To be subject to this vulnerability the `preserveComments` directive must be enabled in your policy file and also allow for certain tags at the same time. As a result, certain crafty inputs can result in elements in comment tags being interpreted as executable when using AntiSamy's sanitized output. This is patched in OWASP AntiSamy .NET 1.2.0 and later. See important remediation details in the reference given below. As a workaround, manually edit the AntiSamy policy file (e.g., antisamy.xml) by deleting the `preserveComments` directive or setting its value to `false`, if present. Also it would be useful to make AntiSamy remove the `noscript` tag by adding a line described in the GitHub Security Advisory to the tag definitions under the `<tagrules>` node, or deleting it entirely if present. As the previously mentioned policy settings are preconditions for the mXSS attack to work, changing them as recommended should be sufficient to protect you against this vulnerability when using a vulnerable version of this library. However, the existing bug would still be present in AntiSamy or its parser dependency (HtmlAgilityPack). The safety of this workaround relies on configurations that may change in the future and don't address the root cause of the vulnerability. As such, it is strongly recommended to upgrade to a fixed version of AntiSamy. |
| CVE-2023-48003 | Medium | 2023-12-26 | Not applicable | No public exploit | An open redirect through HTML injection in user messages in Asp.Net Zero before 12.3.0 allows remote attackers to redirect targeted victims to any URL via the '<meta http-equiv="refresh"' in the WebSocket messages. |
| CVE-2023-31048 | Medium | 2023-12-12 | Not applicable | No public exploit | The OPC UA .NET Standard Reference Server before 1.4.371.86. places sensitive information into an error message that may be seen remotely. |
| CVE-2023-49289 | Medium | 2023-12-05 | Not applicable | No public exploit | Ajax.NET Professional (AjaxPro) is an AJAX framework for Microsoft ASP.NET which will create proxy JavaScript classes that are used on client-side to invoke methods on the web server. Affected versions of this package are vulnerable cross site scripting attacks. Releases before version 21.12.22.1 are affected. Users are advised to upgrade. There are no known workarounds for this vulnerability. |
| CVE-2021-22143 | Medium | 2023-11-22 | Not applicable | No public exploit | The Elastic APM .NET Agent can leak sensitive HTTP header information when logging the details during an application error. Normally, the APM agent will sanitize sensitive HTTP header details before sending the information to the APM server. During an application error it is possible the headers will not be sanitized before being sent. |
| CVE-2023-36558 | Medium | 2023-11-14 | Not applicable | Proof of concept only | ASP.NET Core Security Feature Bypass Vulnerability |
| CVE-2023-36799 | Medium | 2023-09-12 | Not applicable | No public exploit | .NET Core and Visual Studio Denial of Service Vulnerability |
| CVE-2023-33405 | Medium | 2023-06-21 | Not applicable | Working exploit published | Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect. |
| CVE-2023-32032 | Medium | 2023-06-14 | Not applicable | Proof of concept only | .NET and Visual Studio Elevation of Privilege Vulnerability |
| CVE-2023-22858 | Medium | 2023-03-06 | Not applicable | No public exploit | An Improper Access Control vulnerability in BlogEngine.NET 3.3.8.0, allows unauthenticated visitors to access the files of unpublished blogs. |
| CVE-2023-21722 | Medium | 2023-02-14 | Not applicable | No public exploit | .NET Framework Denial of Service Vulnerability |
| CVE-2023-0650 | Medium | 2023-02-02 | Not applicable | No public exploit | A vulnerability was found in YAFNET up to 3.1.11 and classified as problematic. This issue affects some unknown processing of the component Signature Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.1.12 is able to address this issue. The identifier of the patch is a1442a2bacc3335461b44c250e81f8d99c60735f. It is recommended to upgrade the affected component. The identifier VDB-220037 was assigned to this vulnerability. |
| CVE-2023-0549 | Medium | 2023-01-27 | Not applicable | No public exploit | A vulnerability, which was classified as problematic, has been found in YAFNET up to 3.1.10. This issue affects some unknown processing of the file /forum/PostPrivateMessage of the component Private Message Handler. The manipulation of the argument subject/message leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.1.11 is able to address this issue. The identifier of the patch is 2237a9d552e258a43570bb478a92a5505e7c8797. It is recommended to upgrade the affected component. The identifier VDB-219665 was assigned to this vulnerability. |
| CVE-2022-41064 | Medium | 2022-11-09 | Not applicable | No public exploit | .NET Framework Information Disclosure Vulnerability |
| CVE-2022-36600 | Medium | 2022-09-02 | Not applicable | No public exploit | BlogEngine v3.3.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /blogengine/api/posts. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description field. |
| CVE-2022-34716 | Medium | 2022-08-09 | Not applicable | No public exploit | .NET Spoofing Vulnerability |
| CVE-2022-30184 | Medium | 2022-06-15 | Not applicable | No public exploit | .NET and Visual Studio Information Disclosure Vulnerability |
| CVE-2022-29245 | Medium | 2022-05-31 | Not applicable | Proof of concept only | SSH.NET is a Secure Shell (SSH) library for .NET. In versions 2020.0.0 and 2020.0.1, during an `X25519` key exchange, the client’s private key is generated with `System.Random`. `System.Random` is not a cryptographically secure random number generator, it must therefore not be used for cryptographic purposes. When establishing an SSH connection to a remote host, during the X25519 key exchange, the private key is generated with a weak random number generator whose seed can be brute forced. This allows an attacker who is able to eavesdrop on the communications to decrypt them. Version 2020.0.2 contains a patch for this issue. As a workaround, one may disable support for `curve25519-sha256` and `curve25519-sha256@libssh.org` key exchange algorithms. |
| CVE-2022-28921 | Medium | 2022-05-18 | Not applicable | No public exploit | A Cross-Site Request Forgery (CSRF) vulnerability discovered in BlogEngine.Net v3.3.8.0 allows unauthenticated attackers to read arbitrary files on the hosting web server. |
| CVE-2022-30130 | Medium | 2022-05-10 | Not applicable | No public exploit | .NET Framework Denial of Service Vulnerability |
| CVE-2022-26907 | Medium | 2022-04-15 | Not applicable | No public exploit | Azure SDK for .NET Information Disclosure Vulnerability |
| CVE-2022-24512 | Medium | 2022-03-09 | Not applicable | No public exploit | .NET and Visual Studio Remote Code Execution Vulnerability |
| CVE-2021-41355 | Medium | 2021-10-13 | Not applicable | No public exploit | .NET Core and Visual Studio Information Disclosure Vulnerability |
| CVE-2021-23445 | Medium | 2021-09-27 | Not applicable | Proof of concept only | This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped. |
| CVE-2021-34532 | Medium | 2021-08-12 | Not applicable | No public exploit | ASP.NET Core and Visual Studio Information Disclosure Vulnerability |
| CVE-2021-34485 | Medium | 2021-08-12 | Not applicable | No public exploit | .NET Core and Visual Studio Information Disclosure Vulnerability |
| CVE-2020-15522 | Medium | 2021-05-20 | No exploit published | No public exploit | Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing information for the generation of multiple deterministic ECDSA signatures. |
| CVE-2021-1721 | Medium | 2021-02-25 | Not applicable | No public exploit | .NET Core and Visual Studio Denial of Service Vulnerability |
| CVE-2020-29457 | Medium | 2021-02-16 | Not applicable | No public exploit | A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 could allow a rogue application to establish a secure connection. |
| CVE-2020-16937 | Medium | 2020-10-16 | Not applicable | No public exploit | <p>An information disclosure vulnerability exists when the .NET Framework improperly handles objects in memory. An attacker who successfully exploited the vulnerability could disclose contents of an affected system's memory.</p> <p>To exploit the vulnerability, an authenticated attacker would need to run a specially crafted application.</p> <p>The update addresses the vulnerability by correcting how the .NET Framework handles objects in memory.</p> |
| CVE-2020-8927 | Medium | 2020-09-15 | Not applicable | No public exploit | A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the "streaming" API as opposed to the "one-shot" API, and impose chunk size limits. |
| CVE-2020-1476 | Medium | 2020-08-17 | Not applicable | No public exploit | An elevation of privilege vulnerability exists when ASP.NET or .NET web applications running on IIS improperly allow access to cached files. An attacker who successfully exploited this vulnerability could gain access to restricted files. To exploit this vulnerability, an attacker would need to send a specially crafted request to an affected server. The update addresses the vulnerability by changing how ASP.NET and .NET handle requests. |
| CVE-2019-10797 | Medium | 2020-02-19 | No exploit published | No public exploit | Netty in WSO2 transport-http before v6.3.1 is vulnerable to HTTP Response Splitting due to HTTP Header validation being disabled. |
| CVE-2019-18636 | Medium | 2019-11-01 | Not applicable | No public exploit | A cross-site scripting (XSS) vulnerability in Jitbit .NET Forum (aka ASP.NET forum) 8.3.8 allows remote attackers to inject arbitrary web script or HTML via the gravatar URL parameter. |
| CVE-2019-16251 | Medium | 2019-10-31 | Not applicable | No public exploit | plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes. |
| CVE-2019-1142 | Medium | 2019-09-11 | Not applicable | No public exploit | An elevation of privilege vulnerability exists when the .NET Framework common language runtime (CLR) allows file creation in arbitrary locations, aka '.NET Framework Elevation of Privilege Vulnerability'. |
| CVE-2015-9365 | Medium | 2019-08-28 | Not applicable | No public exploit | Authorize.net Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg(). |
| CVE-2019-1075 | Medium | 2019-07-15 | Not applicable | No public exploit | A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'. |
| CVE-2019-10721 | Medium | 2019-07-03 | Not applicable | No public exploit | BlogEngine.NET 3.3.7.0 allows a Client Side URL Redirect via the ReturnUrl parameter, related to BlogEngine/BlogEngine.Core/Services/Security/Security.cs, login.aspx, and register.aspx. |
| CVE-2019-0864 | Medium | 2019-05-16 | Not applicable | No public exploit | A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory, aka '.NET Framework Denial of Service Vulnerability'. |
| CVE-2019-11397 | Medium | 2019-05-14 | Not applicable | No public exploit | GetFile.aspx in Rapid4 RapidFlows Enterprise Application Builder 4.5M.23 (when used with .NET Framework 4.5) allows Local File Inclusion via the FileDesc parameter. |
| CVE-2019-0757 | Medium | 2019-04-09 | Not applicable | No public exploit | A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'. |
| CVE-2019-0657 | Medium | 2019-03-05 | Not applicable | No public exploit | A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'. |
| CVE-2018-8416 | Medium | 2018-11-14 | Not applicable | No public exploit | A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1. |
| CVE-2018-17060 | Medium | 2018-10-08 | Not applicable | No public exploit | Telerik Extensions for ASP.NET MVC (all versions) does not whitelist requests, which can allow a remote attacker to access files inside the server's web directory. NOTE: this product has been obsolete since June 2013. |
| CVE-2018-12087 | Medium | 2018-10-03 | Not applicable | No public exploit | Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to decrypt passwords. |
| CVE-2018-8356 | Medium | 2018-07-11 | Not applicable | No public exploit | A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, ASP.NET Core 1.1, Microsoft .NET Framework 4.5.2, ASP.NET Core 2.0, ASP.NET Core 1.0, .NET Core 1.1, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET Core 1.0, .NET Core 2.0, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 4.7.2. |
| CVE-2018-7559 | Medium | 2018-06-13 | Not applicable | No public exploit | An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Sample Code before GitHub commit 2018-03-13. A vulnerability in OPC UA applications can allow a remote attacker to determine a Server's private key by sending carefully constructed bad UserIdentityTokens as part of an oracle attack. |
| CVE-2018-10138 | Medium | 2018-04-16 | Not applicable | No public exploit | The CATALooK.netStore module through 7.2.8 for DNN (formerly DotNetNuke) allows XSS via the /ViewEditGoogleMaps.aspx PortalID or CATSkin parameter, or the /ImageViewer.aspx link or desc parameter. |
| CVE-2018-0785 | Medium | 2018-01-10 | Not applicable | No public exploit | ASP.NET Core 1.0. 1.1, and 2.0 allow a cross site request forgery vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core Cross Site Request Forgery Vulnerability". |
| CVE-2017-15810 | Medium | 2017-10-23 | Not applicable | No public exploit | The PopCash.Net Code Integration Tool plugin before 1.1 for WordPress has XSS via the tab parameter to wp-admin/admin.php. |
| CVE-2017-9356 | Medium | 2017-06-23 | Not applicable | No public exploit | Sitecore.NET 7.1 through 7.2 has a Cross Site Scripting Vulnerability via the searchStr parameter to the /Search-Results URI. |
| CVE-2017-0256 | Medium | 2017-05-12 | Not applicable | No public exploit | A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests. |
| CVE-2016-3209 | Medium | 2016-10-14 | Not applicable | Working exploit published | Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; Live Meeting 2007 Console; .NET Framework 3.0 SP2, 3.5, 3.5.1, 4.5.2, and 4.6; and Silverlight 5 allows remote attackers to bypass the ASLR protection mechanism via unspecified vectors, aka "True Type Font Parsing Information Disclosure Vulnerability." |
| CVE-2016-0149 | Medium | 2016-05-11 | Not applicable | No public exploit | Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows man-in-the-middle attackers to obtain sensitive cleartext information via vectors involving injection of cleartext data into the client-server data stream, aka "TLS/SSL Information Disclosure Vulnerability." |
| CVE-2015-6115 | Medium | 2015-11-11 | Not applicable | No public exploit | Microsoft .NET Framework 2.0 SP2, 3.5, and 3.5.1 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka ".NET ASLR Bypass." |
| CVE-2015-6099 | Medium | 2015-11-11 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in ASP.NET in Microsoft .NET Framework 4, 4.5, 4.5.1, 4.5.2, and 4.6 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka ".NET Elevation of Privilege Vulnerability." |
| CVE-2015-6096 | Medium | 2015-11-11 | Not applicable | Forecast only | The XML DTD parser in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka ".NET Information Disclosure Vulnerability." |
| CVE-2015-2526 | Medium | 2015-09-09 | Not applicable | No public exploit | Microsoft .NET Framework 4.5, 4.5.1, 4.5.2, and 4.6 allows remote attackers to cause a denial of service to an ASP.NET web site via crafted requests, aka "MVC Denial of Service Vulnerability." |
| CVE-2015-1672 | Medium | 2015-05-13 | Not applicable | No public exploit | Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 allows remote attackers to cause a denial of service (recursion and performance degradation) via crafted encrypted data in an XML document, aka ".NET XML Decryption Denial of Service Vulnerability." |
| CVE-2015-1670 | Medium | 2015-05-13 | Not applicable | No public exploit | The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2, allows remote attackers to obtain sensitive information from process memory via a crafted OpenType font on a web site, aka "OpenType Font Parsing Vulnerability." |
| CVE-2014-6030 | Medium | 2014-11-06 | Not applicable | Working exploit published | Multiple SQL injection vulnerabilities in ClassApps SelectSurvey.NET before 4.125.002 allow (1) remote attackers to execute arbitrary SQL commands via the SurveyID parameter to survey/ReviewReadOnlySurvey.aspx or (2) remote authenticated users to execute arbitrary SQL commands via the SurveyID parameter to survey/UploadImagePopupToDb.aspx. |
| CVE-2014-6965 | Medium | 2014-10-16 | Not applicable | No public exploit | The FAZ.NET (aka net.faz.FAZ) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. |
| CVE-2014-4122 | Medium | 2014-10-15 | Not applicable | No public exploit | Microsoft .NET Framework 2.0 SP2, 3.5, and 3.5.1 omits the ASLR protection mechanism, which allows remote attackers to obtain potentially sensitive information about memory addresses by leveraging the predictability of an executable image's location, aka ".NET ASLR Vulnerability." |
| CVE-2014-4075 | Medium | 2014-10-15 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in System.Web.Mvc.dll in Microsoft ASP.NET Model View Controller (MVC) 2.0 through 5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted web page, aka "MVC XSS Vulnerability." |
| CVE-2014-4958 | Medium | 2014-09-26 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in Telerik UI for ASP.NET AJAX RadEditor control 2014.1.403.35, 2009.3.1208.20, and other versions allows remote attackers to inject arbitrary web script or HTML via CSS expressions in style attributes. |
| CVE-2014-4072 | Medium | 2014-09-10 | Not applicable | No public exploit | Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly use a hash table for request data, which allows remote attackers to cause a denial of service (resource consumption and ASP.NET performance degradation) via crafted requests, aka ".NET Framework Denial of Service Vulnerability." |
| CVE-2014-4062 | Medium | 2014-08-12 | Not applicable | No public exploit | Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, and 3.5.1 does not properly implement the ASLR protection mechanism, which allows remote attackers to obtain sensitive address information via a crafted web site, aka ".NET ASLR Vulnerability." |
| CVE-2013-3739 | Medium | 2014-06-05 | Not applicable | Exploited | Directory traversal vulnerability in editor.php in Network Weathermap 0.97c and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the mapname parameter in a show_config action. |
| CVE-2013-2618 | Medium | 2014-06-05 | Not applicable | Exploited | Cross-site scripting (XSS) vulnerability in editor.php in Network Weathermap before 0.97b allows remote attackers to inject arbitrary web script or HTML via the map_title parameter. |