Most recent entries from all

bdu:2020-04581

2026-10-03T21:10:59.586620+00:00

bdu:2020-04581

certfr-2020-avi-563 — Une vulnérabilité a été corrigée dans Microsoft .Net. Elle permet à un attaquant de provoqu…

2026-10-03T21:10:59.586662+00:00

certfr-2020-avi-563

cnvd-2020-72702

2026-10-03T21:10:59.586682+00:00

cnvd-2020-72702

EUVD-2026-202356

2026-10-03T21:10:59.586695+00:00

EUVD-2026-202356

fkie_cve-2020-1045

2026-10-03T21:10:59.586706+00:00

A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.

The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded.

The security update addresses the vulnerability by fixing the way the ASP.NET Core cookie parser handles encoded names.

GHSA-hxrm-9w7p-39cc — Cookie parsing failure

2026-10-03T21:10:59.586737+00:00

Affected: NuGet: Microsoft.AspNetCore.Http, NuGet: Microsoft.AspNetCore.App, NuGet: Microsoft.Owin, NuGet: Microsoft.AspNetCore.App.Runtime.linux-arm, NuGet: Microsoft.AspNetCore.App.Runtime.linux-arm64, NuGet: Microsoft.AspNetCore.App.Runtime.linux-musl-x64, NuGet: Microsoft.AspNetCore.App.Runtime.linux-x64, NuGet: Microsoft.AspNetCore.App.Runtime.osx-x64, NuGet: Microsoft.AspNetCore.App.Runtime.win-arm, NuGet: Microsoft.AspNetCore.App.Runtime.win-x64 and 3 more

A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded.The security update addresses the vulnerability by fixing the way the ASP.NET Core cookie parser handles encoded names., aka 'Microsoft ASP.NET Core Security Feature Bypass Vulnerability'.

gsd-2020-1045

2026-10-03T21:10:59.586783+00:00

gsd-2020-1045

RHSA-2020:3697 — Red Hat Security Advisory: .NET Core 3.1 security and bugfix update for Red Hat Enterprise Linux

2026-10-03T21:10:59.586795+00:00

dotnet: ASP.NET cookie prefix spoofing vulnerability

RHSA-2020:3699 — Red Hat Security Advisory: .NET Core 3.1 security and bugfix update

2026-10-03T21:10:59.586815+00:00

dotnet: ASP.NET cookie prefix spoofing vulnerability