Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2567▼ 296 respecto a la semana anterior

Críticas / altas1351▲ 100 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2018-8171	Modificada	Alta (7.5)	10%	—	Microsoft Asp.net Core Microsoft Asp.net Model View Controller Microsoft Asp.net Webpages	11/7/2018	17/6/2026	A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MVC 5.2.
CVE-2017-0256	Modificada	Media (5.3)	3.5%	—	Microsoft Asp.net Model View Controller Microsoft.aspnetcore.mvc.abstractions Microsoft.aspnetcore.mvc.apiexplorer Microsoft.aspnetcore.mvc.cors+14	12/5/2017	17/6/2026	A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.
CVE-2017-0249	Modificada	Alta (7.3)	4.2%	—	Microsoft Asp.net Model View Controller Microsoft.aspnetcore.mvc.abstractions Microsoft.aspnetcore.mvc.apiexplorer Microsoft.aspnetcore.mvc.cors+14	12/5/2017	17/6/2026	An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.
CVE-2017-0247	Modificada	Alta (7.5)	17%	—	Microsoft Asp.net Model View Controller Microsoft.aspnetcore.mvc.abstractions Microsoft.aspnetcore.mvc.apiexplorer Microsoft.aspnetcore.mvc.cors+14	12/5/2017	17/6/2026	A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party claims that the issue is that the TextEncoder.EncodeCore function in the System.Text.Encodings.Web package in ASP.NET Core Mvc before 1.0.4 and 1.1.x before 1.1.3…
CVE-2014-4075	Modificada	Media (4.3)	20%	—	Microsoft Asp.net Model View Controller	15/10/2014	17/6/2026	Cross-site scripting (XSS) vulnerability in System.Web.Mvc.dll in Microsoft ASP.NET Model View Controller (MVC) 2.0 through 5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted web page, aka "MVC XSS Vulnerability."