HighCVSS 7.8
EPSS 0.36%
Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.
Product
alpine/dotnet8-runtime vulnerabilities
112 published CVES affecting alpine/dotnet8-runtime, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 112
- Critical
- 5
- High
- 85
- Medium
- 22
- Low
- 0
- Unscored
- 0
- CISA KEV
- 1
Latest alpine/dotnet8-runtime CVEs
Newest publication first · page 1 of 5
-
-
MediumCVSS 5.3 EPSS 0.68%
MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter allocates an object[] from each declared ar...
-
CriticalCVSS 9.8 EPSS 1.7%
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
-
MediumCVSS 5.9 EPSS 0.90%
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could...
-
HighCVSS 7.5 EPSS 1.3%
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.
-
HighCVSS 7.5 EPSS 1.2%
Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.
-
HighCVSS 7.5 EPSS 0.97%
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
-
HighCVSS 7.5 EPSS 1.2%
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
-
MediumCVSS 6.5 EPSS 0.30%
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.
-
HighCVSS 7.5 EPSS 0.64%
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.
-
HighCVSS 8.8 EPSS 0.86%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
-
MediumCVSS 5.3 EPSS 0.33%
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
-
HighCVSS 7.5 EPSS 0.99%
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
HighCVSS 7.5 EPSS 0.90%
Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.
-
HighCVSS 7.8 EPSS 0.41%
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
-
HighCVSS 8.8 EPSS 0.95%
Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
-
MediumCVSS 6.5 EPSS 0.95%
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.
-
HighCVSS 7.8 EPSS 0.41%
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
-
HighCVSS 8.8 EPSS 0.86%
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.
-
HighCVSS 7.5 EPSS 0.99%
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
-
HighCVSS 8.8 EPSS 1.4%
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
-
HighCVSS 8.8 EPSS 1.4%
Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.
-
HighCVSS 8.8 EPSS 0.80%
Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.
-
CriticalCVSS 9.4 EPSS 0.93%
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.
-
HighCVSS 7.5 EPSS 1.1%
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.