MO
Product
Mono
15
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Mono to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-3382 | – | Jul 12 | Cross-site scripting (XSS) vulnerability in the ProcessRequest function in mcs/class/System.Web/System.Web/HttpForbiddenHandler.cs in Mono 2.10.8 and earlier allows remote… Affected: through 2.10.8 |
| CVE-2011-0992 | – | Apr 13 | Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service (plugin crash) or obtain… Affected: All versions, or not specified |
| CVE-2011-0991 | – | Apr 13 | Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service or possibly have… Affected: All versions, or not specified |
| CVE-2011-0990 | – | Apr 13 | Race condition in the FastCopy optimization in the Array.Copy method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote… Affected: All versions, or not specified |
| CVE-2011-0989 | – | Apr 13 | The RuntimeHelpers.InitializeArray method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, does not properly restrict data types, which… Affected: All versions, or not specified |
| CVE-2010-4225 | – | Jan 11 | Unspecified vulnerability in the mod_mono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the source code for .aspx (ASP.NET) applications via unknown… Affected: 2.8; 2.8.1 |
| CVE-2010-4254 | – | Dec 3 | Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic… Affected: All versions, or not specified |
| CVE-2010-4159 | – | Nov 17 | Untrusted search path vulnerability in metadata/loader.c in Mono 2.8 and earlier allows local users to gain privileges via a Trojan horse shared library in the current working… Affected: through 2.6.7; 1.0; 1.0.1; 1.0.2; 1.0.4; 1.0.5; +34 more |
| CVE-2010-1459 | – | May 27 | The default configuration of ASP.NET in Mono before 2.6.4 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting… Affected: 1.0; 1.0.1; 1.0.2; 1.0.4; 1.0.5; 1.0.6; +34 more |
| CVE-2008-3906 | – | Sep 4 | CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF… Affected: 1.0; 1.0.5; 1.1.4; 1.1.8.3; 1.1.13; 1.1.13.4; +6 more |
| CVE-2008-3422 | – | Jul 31 | Multiple cross-site scripting (XSS) vulnerabilities in the ASP.net class libraries in Mono 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via… Affected: 1.0; 1.0.5; 1.1.4; 1.1.8.3; 1.1.13; 1.1.13.4; +6 more |
| CVE-2007-5197 | – | Nov 2 | Buffer overflow in the Mono.Math.BigInteger class in Mono 1.2.5.1 and earlier allows context-dependent attackers to execute arbitrary code via unspecified vectors related to… Affected: through 1.2.5.1; 1.0; 1.0.5; 1.1.4; 1.1.8.3; 1.1.13; +6 more |
| CVE-2007-5473 | – | Oct 18 | StaticFileHandler.cs in System.Web in Mono before 1.2.5.2, when running on Windows, allows remote attackers to obtain source code of sensitive files via a request containing a… Affected: through 1.2.5.1 |
| CVE-2006-5072 | – | Oct 10 | The System.CodeDom.Compiler classes in Novell Mono create temporary files with insecure permissions, which allows local users to overwrite arbitrary files or execute arbitrary… Affected: 1.0; 2.0 |
| CVE-2005-0509 | – | Mar 14 | Multiple cross-site scripting (XSS) vulnerabilities in the Mono 1.0.5 implementation of ASP.NET (.Net) allow remote attackers to inject arbitrary HTML or web script via Unicode… Affected: 1.0.5 |
Showing 15