HighCVSS 8.1
EPSS 0.76%
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
Product
alpine/dotnet9-runtime vulnerabilities
114 published CVES affecting alpine/dotnet9-runtime, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 114
- Critical
- 6
- High
- 87
- Medium
- 21
- Low
- 0
- Unscored
- 0
- CISA KEV
- 1
Latest alpine/dotnet9-runtime CVEs
Newest publication first · page 1 of 5
-
-
HighCVSS 8.8 EPSS 0.95%
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
-
HighCVSS 8.8 EPSS 0.87%
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
-
HighCVSS 8.8 EPSS 0.87%
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
-
HighCVSS 7.5 EPSS 0.25%
Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges locally.
-
HighCVSS 7.5 EPSS 1.3%
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
HighCVSS 8.8 EPSS 0.95%
Stack-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
-
HighCVSS 8.8 EPSS 1.5%
Deserialization of untrusted data in Visual Studio allows an unauthorized attacker to execute code over a network.
-
HighCVSS 7.5 EPSS 1.3%
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
HighCVSS 7.5 EPSS 1.3%
Missing release of memory after effective lifetime in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
CriticalCVSS 9.0 EPSS 0.76%
Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
-
MediumCVSS 6.1 EPSS 0.64%
Improper encoding or escaping of output in ASP.NET Core allows an unauthorized attacker to disclose information over a network.
-
HighCVSS 7.5 EPSS 1.3%
Stack-based buffer overflow in .NET allows an unauthorized attacker to deny service over a network.
-
HighCVSS 7.5 EPSS 0.34%
Improper access control in .NET allows an authorized attacker to elevate privileges locally.
-
HighCVSS 7.8 EPSS 0.36%
Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.
-
MediumCVSS 5.3 EPSS 0.68%
MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter allocates an object[] from each declared ar...
-
CriticalCVSS 9.8 EPSS 1.7%
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
-
MediumCVSS 5.9 EPSS 0.90%
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could...
-
HighCVSS 7.5 EPSS 1.3%
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.
-
HighCVSS 7.5 EPSS 1.2%
Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.
-
HighCVSS 7.5 EPSS 0.97%
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
-
HighCVSS 7.5 EPSS 1.2%
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
-
MediumCVSS 6.5 EPSS 0.30%
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.
-
HighCVSS 7.5 EPSS 0.64%
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.
-
HighCVSS 8.8 EPSS 0.86%
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.