Asp.net Model View Controller (Microsoft) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 14 known versions, newest CVE from 2018-07-11. Vendor: Microsoft.

CVEs of Asp.net Model View Controller

• CVE-2018-8171 - CVSS 7.5 (high), 2018-07-11: A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass…
• CVE-2017-0256 - CVSS 5.3 (medium), 2017-05-12: A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.
• CVE-2017-0249 - CVSS 7.3 (high), 2017-05-12: An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.
• CVE-2017-0247 - CVSS 7.5 (high), 2017-05-12: A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party…
• CVE-2014-4075 - CVSS 4.3 (medium), 2014-10-15: Cross-site scripting (XSS) vulnerability in System.Web.Mvc.dll in Microsoft ASP.NET Model View Controller (MVC) 2.0 through 5.1 allows remote attackers to…