ASP.NET Core vulnerabilities

ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL.

An elevation of privilege vulnerability exists when ASP.NET Core fails to properly sanitize web requests.

Inconsistent interpretation of HTTP requests (HTTP request/response smuggling) in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.

Inconsistent interpretation of HTTP requests (HTTP request/response smuggling) in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.

A vulnerability in ASP.NET Core due to improper verification of cryptographic signature allows an unauthorized attacker to elevate privileges over a network.

ASP.NET Core has a Denial of Service (DoS) vulnerability that could lead to service overload and unavailability.

Denial of service vulnerability in ASP.NET Core when improperly handling web requests. A remote unauthenticated attacker could send specially crafted requests, causing the application to become unavailable.

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.

A cross-site scripting (XSS) vulnerability in ASP.NET Core allows an unauthorized attacker to execute code over a network.

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.

A deadlock vulnerability in ASP.NET Core allows an unauthorized attacker to deny service over a network.

A race condition in ASP.NET Core caused by improper synchronization of a shared resource allows an authorized attacker to elevate privileges over a network.

An allocation of resources without limits or throttling vulnerability in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

A vulnerability in ASP.NET Core involves allocation of resources without limits or throttling. An unauthenticated attacker can cause a denial of service over the network.

Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

ASP.NET Core has an authentication bypass vulnerability due to assumed-immutable data. This allows an authorized attacker to elevate privileges over a network.

Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

Resource allocation without limits in ASP.NET Core allows an unauthorized attacker to perform a DoS attack over the network.

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

A vulnerability in ASP.NET Core allows an unauthorized attacker to perform a Denial of Service (DoS) attack by allocating resources without limits or throttling. The attack can be carried out remotely over a network.

In ASP.NET Core, uncontrolled resource consumption allows an unauthorized attacker to perform a denial of service attack over a network.

A vulnerability in ASP.NET Core causes an infinite loop, which can be exploited by an unauthorized attacker to perform a Denial of Service (DoS) attack over the network.

A vulnerability in ASP.NET Core allows an unauthorized attacker to perform a Denial of Service (DoS) attack by allocating resources without limits or throttling. The attack can be carried out remotely over a network.

Information disclosure vulnerability in ASP.NET Core and Visual Studio. Could allow an attacker to read sensitive data.