MO
Vendor
Mono
21
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2020-12471 | MO Monox Mono | 9.8 | Apr 29 | MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-US/PhotoGallery.aspx because of deserialization in… |
| CVE-2020-12470 | MO Monox Mono | 7.2 | Apr 29 | MonoX through 5.1.40.5152 allows administrators to execute arbitrary code by modifying an ASPX template |
| CVE-2020-12473 | MO Monox Mono | 7.2 | Apr 29 | MonoX through 5.1.40.5152 allows admins to execute arbitrary programs by reconfiguring the Converter Executable setting from ffmpeg.exe to a different program |
| CVE-2020-12472 | MO Monox Mono | 5.4 | Apr 29 | MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description |
| CVE-2012-3382 | MO Mono Mono | – | Jul 12 | Cross-site scripting (XSS) vulnerability in the ProcessRequest function in mcs/class/System.Web/System.Web/HttpForbiddenHandler.cs in Mono 2.10.8 and earlier allows remote… |
| CVE-2011-0989 | MO Mono Mono | – | Apr 13 | The RuntimeHelpers.InitializeArray method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, does not properly restrict data types, which… |
| CVE-2011-0992 | MO Mono Mono | – | Apr 13 | Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service (plugin crash) or obtain… |
| CVE-2011-0991 | MO Mono Mono | – | Apr 13 | Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service or possibly have… |
| CVE-2011-0990 | MO Mono Mono | – | Apr 13 | Race condition in the FastCopy optimization in the Array.Copy method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote… |
| CVE-2010-4225 | MO Mono Mono | – | Jan 11 | Unspecified vulnerability in the mod_mono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the source code for .aspx (ASP.NET) applications via unknown… |
| CVE-2010-4254 | MO Mono Mono | – | Dec 3 | Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic… |
| CVE-2010-4159 | MO Mono Mono | – | Nov 17 | Untrusted search path vulnerability in metadata/loader.c in Mono 2.8 and earlier allows local users to gain privileges via a Trojan horse shared library in the current working… |
| CVE-2010-1459 | MO Mono Mono | – | May 27 | The default configuration of ASP.NET in Mono before 2.6.4 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting… |
| CVE-2008-3906 | MO Mono Mono | – | Sep 4 | CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF… |
| CVE-2008-3422 | MO Mono Mono | – | Jul 31 | Multiple cross-site scripting (XSS) vulnerabilities in the ASP.net class libraries in Mono 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via… |
| CVE-2007-5197 | MO Mono Mono | – | Nov 2 | Buffer overflow in the Mono.Math.BigInteger class in Mono 1.2.5.1 and earlier allows context-dependent attackers to execute arbitrary code via unspecified vectors related to… |
| CVE-2007-5473 | MO Mono Mono | – | Oct 18 | StaticFileHandler.cs in System.Web in Mono before 1.2.5.2, when running on Windows, allows remote attackers to obtain source code of sensitive files via a request containing a… |
| CVE-2006-6104 | XS Xsp Mono | – | Dec 21 | The System.Web class in the XSP for ASP.NET server 1.1 through 2.0 in Mono does not properly verify local pathnames, which allows remote attackers to (1) read source code by… |
| CVE-2006-5072 | MO Mono Mono | – | Oct 10 | The System.CodeDom.Compiler classes in Novell Mono create temporary files with insecure permissions, which allows local users to overwrite arbitrary files or execute arbitrary… |
| CVE-2006-2658 | XS Xsp Mono | – | Sep 12 | Directory traversal vulnerability in the xsp component in mod_mono in Mono/C# web server, as used in SUSE Open-Enterprise-Server 1 and SUSE Linux 9.2 through 10.0, allows remote… |
| CVE-2005-0509 | MO Mono Mono | – | Mar 14 | Multiple cross-site scripting (XSS) vulnerabilities in the Mono 1.0.5 implementation of ASP.NET (.Net) allow remote attackers to inject arbitrary HTML or web script via Unicode… |