Mono vulnerabilities

Products

• Mono 16
• Monox 4
• Xsp 2

Newest

• mono monox MonoX through 5.1.40.5152 allows administrators to execute arbitrary code by modifying an ASPX... CVE-2020-12470 7.2 HighApril 29, 2020
• mono monox MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages... CVE-2020-12471 9.8 CriticalApril 29, 2020
• mono monox MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description. CVE-2020-12472 5.4 MediumApril 29, 2020
• mono monox MonoX through 5.1.40.5152 allows admins to execute arbitrary programs by reconfiguring the... CVE-2020-12473 7.2 HighApril 29, 2020
• mono, canonical ubuntu linux, debian linux +2 more mono 2.10.x ASP.NET Web Form Hash collision DoS CVE-2012-3543 Fix available 7.5 HighAugust 28, 2012
• mono Cross-site scripting (XSS) vulnerability in the ProcessRequest function in mcs/class/System.Web... CVE-2012-3382 Fix available 4.3 MediumJuly 12, 2012
• mono, novell moonlight +1 more Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is... CVE-2011-0991 6.8 MediumApril 13, 2011
• mono, novell moonlight +1 more Race condition in the FastCopy optimization in the Array.Copy method in metadata/icall.c in Mono,... CVE-2011-0990 5.8 MediumApril 13, 2011
• mono, novell moonlight +1 more The RuntimeHelpers.InitializeArray method in metadata/icall.c in Mono, when Moonlight 2.x before... CVE-2011-0989 5.8 MediumApril 13, 2011
• mono, novell moonlight +1 more Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is... CVE-2011-0992 5.8 MediumApril 13, 2011
• mono Unspecified vulnerability in the mod_mono module for XSP in Mono 2.8.x before 2.8.2 allows remote... CVE-2010-4225 Fix available 5.0 MediumJanuary 11, 2011
• mono, novell moonlight +1 more Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly... CVE-2010-4254 Public exploit EPSS 13.6% 7.5 HighDecember 3, 2010
• mono Untrusted search path vulnerability in metadata/loader.c in Mono 2.8 and earlier allows local... CVE-2010-4159 Fix available 6.9 MediumNovember 17, 2010
• mono Mono ASP.NET View State Cross-Site Scripting (XSS) vulnerability CVE-2010-1459 Fix available 4.3 MediumMay 27, 2010
• mono CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject... CVE-2008-3906 Public exploitFix available 4.3 MediumSeptember 4, 2008
• mono Multiple cross-site scripting (XSS) vulnerabilities in the ASP.net class libraries in Mono 2.0... CVE-2008-3422 Fix available 4.3 MediumJuly 31, 2008
• mono Buffer overflow in the Mono.Math.BigInteger class in Mono 1.2.5.1 and earlier allows context... CVE-2007-5197 Fix available 7.5 HighNovember 1, 2007
• mono StaticFileHandler.cs in System.Web in Mono before 1.2.5.2, when running on Windows, allows remote... CVE-2007-5473 5.0 MediumOctober 18, 2007
• mono xsp The System.Web class in the XSP for ASP.NET server 1.1 through 2.0 in Mono does not properly... CVE-2006-6104 Public exploitFix available 5.0 MediumDecember 21, 2006
• mono The System.CodeDom.Compiler classes in Novell Mono create temporary files with insecure... CVE-2006-5072 Fix available 6.2 MediumOctober 5, 2006
• mono xsp, suse linux, open enterprise server +2 more Directory traversal vulnerability in the xsp component in mod_mono in Mono/C# web server, as used... CVE-2006-2658 Fix available 5.0 MediumSeptember 12, 2006
• mono, microsoft .net framework +1 more Multiple cross-site scripting (XSS) vulnerabilities in the Mono 1.0.5 implementation of ASP.NET (... CVE-2005-0509 Fix available EPSS 15.9% 4.3 MediumFebruary 22, 2005