Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
.NET Number Of NVD 77 CRITICAL 3 HIGH 60 MEDIUM 14 LOW 0
URL https://docs.microsoft.com/ja-jp/dotnet/
Explanation NET is a free and open source development platform for building various types of apps, including

Web apps, Web APIs, and microservices
Serverless functions in the cloud
Cloud native apps
Mobile apps
Desktop apps
Windows WPF
Windows Forms
Universal Windows Platform (UWP)
Games
Internet of Things (IoT)
Machine Learning
Console Apps
Windows Services
Use class libraries to share functionality between different apps and app types.

NET, your code and project files will look the same regardless of the type of app you build. NET, your code and project files will look the same regardless of the type of app you build.

Excerpted from [https://docs.microsoft.com/ja-jp/dotnet/core/introduction]
Tag
  • MIT License
  • Apache License v2.0
Add Information URL
No Type Name URL
1 https://docs.microsoft.com/ja-jp/dotnet/core/releases-and-support
2 https://github.com/dotnet/core/blob/main/roadmap.md
3 https://github.com/dotnet/core/blob/main/release-notes/README.md
List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support		 Extended
for a fee		 Critical High Medium Low
61 .NET 9 9.0.0 Preview 7 Aug. 13, 2024 Feb. 13, 2024 3 60 14 0
62 .NET 8 8.0.401 Aug. 15, 2024 Nov. 14, 2023 2 10 2 0
63 .NET 7 7.0.20 May 28, 2024 Nov. 8, 2022 2 23 4 0
64 .NET 6 6.0.33 Aug. 13, 2024 Nov. 8, 2021 Nov. 8, 2024 2 34 6 0
65 .NET 5 5.0.17 May 10, 2022 Nov. 10, 2020 0 10 6 0
66 .NET Core 3.1 (LTS) 3.1.32 Dec. 13, 2022 Dec. 3, 2019 Dec. 3, 2022 0 14 7 0
67 .NET Core 3.0 3.0.3 Feb. 18, 2020 Sept. 23, 2019 March 3, 2020 0 3 0 0
68 .NET Core 2.2 2.2.8 Nov. 19, 2019 Dec. 4, 2018 Dec. 23, 2019 0 5 1 0
69 .NET Core 2.1 (LTS) 2.1.30 Aug. 20, 2021 May 30, 2018 Aug. 21, 2021 0 11 3 0
70 .NET Core 2.0 2.0.9 July 10, 2018 Aug. 14, 2017 Oct. 1, 2018 0 3 1 0
71 .NET Core 1.1 1.1.13 March 7, 2017 Nov. 16, 2016 June 27, 2019 0 4 1 0
72 .NET Core 1.0 1.0.16 May 14, 2019 June 27, 2016 June 27, 2019 0 6 2 0
73 .NET 6.0 6.0.2 2 34 6 0
74 .NET 4.8 4.8.1 0 0 0 0
75 .NET 4.7 4.7.2 0 0 0 0
76 .NET 4.6 4.6.2 0 0 0 0
77 .NET 4.5 4.5 0 0 0 0
78 .NET 4.0 4.0 0 0 0 0
79 .NET 3.5 3.5.1 0 0 0 0
80 .NET 1.1 1.1.9 0 4 1 0
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2		 Level
Attach Vector		 Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date		 Show Affected Exploit
PoC
Search
61 6.5
4.3 		MEDIUM
Network 		.NET Core and Visual Studio Denial of Service Vulnerability NVD-CWE-noinfo
CVE-2021-1721 cpe:2.3:a:microsoft:.net_core:*:*
cpe:2.3:a:microsoft:.net:*:* 		2.1
3.1
5.0 		2.1.24
3.1.11
5.0.2



2024-11-21 14:44
2021-02-26 		Show GitHub Exploit DB Packet Storm
62 6.5
6.4 		MEDIUM
Network 		A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happ… CWE-120
Classic Buffer Overflow 		CVE-2020-8927 cpe:2.3:a:microsoft:.net_core:*:*
cpe:2.3:a:microsoft:.net:*:* 		3.1
5.0 		3.1.22
5.0.14

2024-11-21 14:39
2020-09-15 		Show GitHub Exploit DB Packet Storm
63 7.8
6.8 		HIGH
Local 		A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, Shar… NVD-CWE-Other
CVE-2020-1147 cpe:2.3:a:microsoft:.net_core:3.1:*
cpe:2.3:a:microsoft:.net_core:2.1:* 		2024-11-21 14:09
2020-07-15 		Show GitHub Exploit DB Packet Storm
64 7.5
5.0 		HIGH
Network 		A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests, aka '.NET Core & .NET Framework Denial of Service Vulnerability'. NVD-CWE-noinfo
CVE-2020-1108 cpe:2.3:a:microsoft:.net_core:3.1:*
cpe:2.3:a:microsoft:.net_core:2.1:*
cpe:2.3:a:microsoft:.net_core:*:*
cpe:… 		2.1
3.0 		2.1.18
3.1.4

2024-11-21 14:09
2020-05-22 		Show GitHub Exploit DB Packet Storm
65 8.8
9.3 		HIGH
Network 		A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary… CWE-20
 Improper Input Validation  		CVE-2020-0606 cpe:2.3:a:microsoft:.net_core:3.1:*
cpe:2.3:a:microsoft:.net_core:3.0:* 		2024-11-21 13:53
2020-01-15 		Show GitHub Exploit DB Packet Storm
66 8.8
9.3 		HIGH
Network 		A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary… CWE-20
 Improper Input Validation  		CVE-2020-0605 cpe:2.3:a:microsoft:.net_core:3.1:*
cpe:2.3:a:microsoft:.net_core:3.0:*
cpe:2.3:a:microsoft:.net_core:1.0:* 		2024-11-21 13:53
2020-01-15 		Show GitHub Exploit DB Packet Storm
67 7.5
5.0 		HIGH
Network 		A denial of service vulnerability exists when .NET Core improperly handles web requests, aka '.NET Core Denial of Service Vulnerability'. NVD-CWE-noinfo
CVE-2019-1301 cpe:2.3:a:microsoft:.net_core:2.2:*
cpe:2.3:a:microsoft:.net_core:2.1:* 		2024-11-21 13:36
2019-09-12 		Show GitHub Exploit DB Packet Storm
68 7.5
5.0 		HIGH
Network 		A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique fro… CWE-19
 Data Processing Errors 		CVE-2019-0981 cpe:2.3:a:microsoft:.net_core:2.2:*
cpe:2.3:a:microsoft:.net_core:2.1:*
cpe:2.3:a:microsoft:.net_core:1.1:*
cp… 		2024-11-21 13:17
2019-05-17 		Show GitHub Exploit DB Packet Storm
69 7.5
5.0 		HIGH
Network 		A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Framework and .Net Core Denial of Service Vulnerability'. This CVE ID is unique fro… CWE-19
 Data Processing Errors 		CVE-2019-0980 cpe:2.3:a:microsoft:.net_core:2.2:*
cpe:2.3:a:microsoft:.net_core:2.1:*
cpe:2.3:a:microsoft:.net_core:1.1:*
cp… 		2024-11-21 13:17
2019-05-17 		Show GitHub Exploit DB Packet Storm
70 7.5
5.0 		HIGH
Network 		A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique … CWE-400
 Uncontrolled Resource Consumption 		CVE-2019-0820 cpe:2.3:a:microsoft:.net_core:2.2:*
cpe:2.3:a:microsoft:.net_core:2.1:*
cpe:2.3:a:microsoft:.net_core:1.1:*
cp… 		2024-11-21 13:17
2019-05-17 		Show GitHub Exploit DB Packet Storm