Old Asp.Net Version in Use

Home/Alerts/Alert detail/

Risk:
Low

Type:
Passive

CWE:
CWE-642

Summary: This website uses ASP.NET version 1.0 or 1.1.

Solution: Ensure the engaged framework is still supported by Microsoft.

Latest Security News

Middle East Cyberwar Rages On, With No End in Sight

AI Could Generate 10,000 Malware Variants, Evading Detection in 88% of Case

Apache fixes remote code execution bypass in Tomcat web server

Microsoft fixes bug behind random Office 365 deactivation errors

Rockstar2FA Collapse Fuels Expansion of FlowerStorm Phishing-as-a-Service

Top 10 Cybersecurity Trends to Expect in 2025

U.S. Judge Rules Against NSO Group in WhatsApp Pegasus Spyware Case

Italy Fines OpenAI €15 Million for ChatGPT GDPR Data Privacy Violations

Top Alert List

MediumAbsence of Anti-CSRF Tokens

Content Security Policy (CSP) Header Not Set

InformationalInformation Disclosure - Suspicious Comments

LowStrict-Transport-Security Multiple Header Entries (Non-compliant with Spec)

LowCookie without SameSite Attribute

CSP

InformationalRe-examine Cache-control Directives

MediumMissing Anti-clickjacking Header

InformationalModern Web Application

LowX-Content-Type-Options Header Missing

Top CVE List

CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability

CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability

CVE-2022-23227 NUUO NVRmini 2 Devices Missing Authentication Vulnerability

CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability

CVE-2023-36884 Microsoft Windows Search Remote Code Execution Vulnerability

CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability

CVE-2020-5849 Unraid Authentication Bypass Vulnerability

CVE-2024-43451 Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability

Common CWEs

CWE-292 DEPRECATED: Trusting Self-reported DNS Name

HighCWE-319 Cleartext Transmission of Sensitive Information

CWE-1254 Incorrect Comparison Logic Granularity

CWE-302 Authentication Bypass by Assumed-Immutable Data

CWE-278 Insecure Preserved Inherited Permissions

CWE-295 Improper Certificate Validation

CWE-244 Improper Clearing of Heap Memory Before Release ('Heap Inspection')

CWE-1329 Reliance on Component That is Not Updateable

CWE-918 Server-Side Request Forgery (SSRF)

CWE-143 Improper Neutralization of Record Delimiters

Free security scan for your website

Don't show website scan report rating on the leaderboard