📦 Asp.net Core

by Microsoft

🔍 What is Asp.net Core?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2025-55315

CRITICAL CVSS 9.9 Oct 14, 2025

CVE-2025-55315 is an HTTP request smuggling vulnerability in ASP.NET Core that allows an authenticated attacker to bypass security features by manipulating HTTP request/response sequences. This affect...

CVE-2025-26682

HIGH CVSS 7.5 Apr 8, 2025

This CVE describes a resource exhaustion vulnerability in ASP.NET Core where an attacker can send specially crafted requests to consume excessive server resources without proper throttling. This allow...

CVE-2023-36038

HIGH CVSS 8.2 Nov 14, 2023

This vulnerability in ASP.NET Core allows attackers to cause denial of service by sending specially crafted requests that consume excessive resources. It affects ASP.NET Core applications running on W...

CVE-2023-44487

HIGH CVSS 7.5 Oct 10, 2023

CVE-2023-44487 is an HTTP/2 protocol vulnerability that allows attackers to cause denial of service by rapidly resetting streams, consuming server resources. This affects any system using HTTP/2, incl...

CVE-2023-38180

HIGH CVSS 7.5 Aug 8, 2023

This CVE describes a denial of service vulnerability in .NET and Visual Studio that allows attackers to crash affected applications by sending specially crafted requests. It affects systems running vu...

CVE-2020-1045

HIGH CVSS 7.5 Sep 11, 2020

This vulnerability allows attackers to bypass ASP.NET Core's cookie security by setting a second cookie with a percent-encoded name. The parser incorrectly decodes entire cookie strings, enabling cook...

CVE-2020-1597

HIGH CVSS 7.5 Aug 17, 2020

CVE-2020-1597 is a denial of service vulnerability in ASP.NET Core where improperly handled web requests allow remote unauthenticated attackers to crash applications. This affects ASP.NET Core web app...