Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
.NET Number Of NVD 77 CRITICAL 3 HIGH 60 MEDIUM 14 LOW 0
URL https://docs.microsoft.com/ja-jp/dotnet/
Explanation NET is a free and open source development platform for building various types of apps, including

Web apps, Web APIs, and microservices
Serverless functions in the cloud
Cloud native apps
Mobile apps
Desktop apps
Windows WPF
Windows Forms
Universal Windows Platform (UWP)
Games
Internet of Things (IoT)
Machine Learning
Console Apps
Windows Services
Use class libraries to share functionality between different apps and app types.

NET, your code and project files will look the same regardless of the type of app you build. NET, your code and project files will look the same regardless of the type of app you build.

Excerpted from [https://docs.microsoft.com/ja-jp/dotnet/core/introduction]
Tag
  • MIT License
  • Apache License v2.0
Add Information URL
No Type Name URL
1 https://docs.microsoft.com/ja-jp/dotnet/core/releases-and-support
2 https://github.com/dotnet/core/blob/main/roadmap.md
3 https://github.com/dotnet/core/blob/main/release-notes/README.md
List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support		 Extended
for a fee		 Critical High Medium Low
71 .NET 9 9.0.0 Preview 7 Aug. 13, 2024 Feb. 13, 2024 3 60 14 0
72 .NET 8 8.0.401 Aug. 15, 2024 Nov. 14, 2023 2 10 2 0
73 .NET 7 7.0.20 May 28, 2024 Nov. 8, 2022 2 23 4 0
74 .NET 6 6.0.33 Aug. 13, 2024 Nov. 8, 2021 Nov. 8, 2024 2 34 6 0
75 .NET 5 5.0.17 May 10, 2022 Nov. 10, 2020 0 10 6 0
76 .NET Core 3.1 (LTS) 3.1.32 Dec. 13, 2022 Dec. 3, 2019 Dec. 3, 2022 0 14 7 0
77 .NET Core 3.0 3.0.3 Feb. 18, 2020 Sept. 23, 2019 March 3, 2020 0 3 0 0
78 .NET Core 2.2 2.2.8 Nov. 19, 2019 Dec. 4, 2018 Dec. 23, 2019 0 5 1 0
79 .NET Core 2.1 (LTS) 2.1.30 Aug. 20, 2021 May 30, 2018 Aug. 21, 2021 0 11 3 0
80 .NET Core 2.0 2.0.9 July 10, 2018 Aug. 14, 2017 Oct. 1, 2018 0 3 1 0
81 .NET Core 1.1 1.1.13 March 7, 2017 Nov. 16, 2016 June 27, 2019 0 4 1 0
82 .NET Core 1.0 1.0.16 May 14, 2019 June 27, 2016 June 27, 2019 0 6 2 0
83 .NET 6.0 6.0.2 2 34 6 0
84 .NET 4.8 4.8.1 0 0 0 0
85 .NET 4.7 4.7.2 0 0 0 0
86 .NET 4.6 4.6.2 0 0 0 0
87 .NET 4.5 4.5 0 0 0 0
88 .NET 4.0 4.0 0 0 0 0
89 .NET 3.5 3.5.1 0 0 0 0
90 .NET 1.1 1.1.9 0 4 1 0
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2		 Level
Attach Vector		 Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date		 Show Affected Exploit
PoC
Search
71 5.9
4.3 		MEDIUM
Network 		A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'. CWE-20
 Improper Input Validation  		CVE-2019-0657 cpe:2.3:a:microsoft:.net_core:2.2:*
cpe:2.3:a:microsoft:.net_core:2.1:*
cpe:2.3:a:microsoft:.net_core:1.0:* 		2024-11-21 13:17
2019-03-6 		Show GitHub Exploit DB Packet Storm
72 7.5
5.0 		HIGH
Network 		An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure V… CWE-200
Information Exposure 		CVE-2019-0545 cpe:2.3:a:microsoft:.net_core:2.2:*
cpe:2.3:a:microsoft:.net_core:2.1:* 		2024-11-21 13:16
2019-01-9 		Show GitHub Exploit DB Packet Storm
73 7.5
5.0 		HIGH
Network 		A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Co… NVD-CWE-noinfo
CVE-2018-8409 cpe:2.3:a:microsoft:.net_core:*:* 2.1 2.1.4 2024-11-21 13:13
2018-09-13 		Show GitHub Exploit DB Packet Storm
74 5.5
2.1 		MEDIUM
Local 		A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affect… CWE-295
Improper Certificate Validation  		CVE-2018-8356 cpe:2.3:a:microsoft:.net_core:2.0:*
cpe:2.3:a:microsoft:.net_core:1.1:*
cpe:2.3:a:microsoft:.net_core:1.0:* 		2024-11-21 13:13
2018-07-11 		Show GitHub Exploit DB Packet Storm
75 7.5
5.0 		HIGH
Network 		A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service Vulnerability." This affects Microsoft .NET Framework 2.0,… CWE-611
XXE 		CVE-2018-0765 cpe:2.3:a:microsoft:.net_core:2.0:* 2024-11-21 12:38
2018-05-10 		Show GitHub Exploit DB Packet Storm
76 7.5
5.0 		HIGH
Network 		Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, .NET Core 1.0 and 2.0, and PowerShell Core 6.0.0 allow a security feature bypass vulnerability due to the … CWE-295
Improper Certificate Validation  		CVE-2018-0786 cpe:2.3:a:microsoft:.net_core:2.0:*
cpe:2.3:a:microsoft:.net_core:1.0:* 		2024-11-21 12:38
2018-01-10 		Show GitHub Exploit DB Packet Storm
77 7.5
5.0 		HIGH
Network 		Microsoft .NET Framework 1.1, 2.0, 3.0, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 5.7 and .NET Core 1.0. 1.1 and 2.0 allow a denial of service vulnerability due to the way XML documents… NVD-CWE-noinfo
CVE-2018-0764 cpe:2.3:a:microsoft:.net_core:2.0:*
cpe:2.3:a:microsoft:.net_core:1.1:*
cpe:2.3:a:microsoft:.net_core:1.0:* 		2024-11-21 12:38
2018-01-10 		Show GitHub Exploit DB Packet Storm