Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mono project mono vulnerabilities and exploits

(subscribe to this query)
383
VMScore
CVE-2008-3422
Multiple cross-site scripting (XSS) vulnerabilities in the ASP.net class libraries in Mono 2.0 and previous versions allow remote malicious users to inject arbitrary web script or HTML via crafted attributes related to (1) HtmlControl.cs (PreProcessRelativeReference), (2) HtmlFor...
Mono Mono 1.0Mono Mono 1.1.18Mono Mono 1.1.4Mono Project Mono 1.2.5Mono Project Mono 1.2.6Mono Mono 1.1.13.4Mono Mono 1.1.13.6Mono Mono 1.1.13.7Mono Project Mono 1.2.1Mono Project Mono 1.2.2Mono Mono 1.0.5Mono Mono 1.1.13Mono Mono 1.1.8.3Mono Mono 1.2.5.1Mono Project Mono 1.9Mono Project MonoMono Mono 1.1.17Mono Mono 1.1.17.1Mono Project Mono 1.2.3Mono Project Mono 1.2.4
435
VMScore
CVE-2008-3906
CRLF injection vulnerability in Sys.Web in Mono 2.0 and previous versions allows remote malicious users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the query string.
Mono Mono 1.0.5Mono Mono 1.1.13Mono Mono 1.2.5.1Mono Project Mono 1.2.1Mono Project MonoMono Mono 1.1.17.1Mono Mono 1.0Mono Mono 1.1.4Mono Mono 1.1.8.3Mono Project Mono 1.2.6Mono Project Mono 1.9Mono Mono 1.1.17Mono Mono 1.1.18Mono Project Mono 1.2.4Mono Project Mono 1.2.5Mono Mono 1.1.13.4Mono Mono 1.1.13.6Mono Mono 1.1.13.7Mono Project Mono 1.2.2Mono Project Mono 1.2.3
383
VMScore
CVE-2010-1459
The default configuration of ASP.NET in Mono prior to 2.6.4 has a value of FALSE for the EnableViewStateMac property, which allows remote malicious users to conduct cross-site scripting (XSS) attacks, as demonstrated by the __VIEWSTATE parameter to 2.0/menu/menu1.aspx in the XSP ...
Mono Mono 1.1.17Mono Mono 1.1.13.7Mono Mono 2.4.2.2Mono Mono 2.4.2.1Mono Mono 1.2.6Mono Mono 1.2.5.2Mono Mono 1.2.1Mono Mono 1.2Mono Mono 1.1.13.2Mono Mono 1.1.12.1Mono Mono 1.1.9Mono Mono 1.1.8.1Mono Mono 1.1.1Mono Mono 1.0.6Mono Mono 1.2.5.1Mono Mono 1.1.8.3Mono Mono 1.1.13.6Mono Mono 1.1.13.4Mono Mono 2.4.2Mono Mono 2.4Mono Mono 1.2.5Mono Mono 1.2.4
445
VMScore
CVE-2015-2319
The TLS stack in Mono prior to 3.12.1 makes it easier for remote malicious users to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a different vulnerability than CVE-2015-0204.
Mono-project Mono
NA
CVE-2023-26314
The mono package prior to 6.8.0.105+dfsg-3.3 for Debian allows arbitrary code execution because the application/x-ms-dos-executable MIME type is associated with an un-sandboxed Mono CLR interpreter.
Mono-project Mono 6.8.0.105\\+dfsg-3Mono-project Mono 5.18.0.240\\+dfsg-3Debian Debian Linux 10.0
668
VMScore
CVE-2015-2320
The TLS stack in Mono prior to 3.12.1 allows remote malicious users to have unspecified impact via vectors related to client-side SSLv2 fallback.
Mono-project MonoDebian Debian Linux 7.0
605
VMScore
CVE-2015-2318
The TLS stack in Mono prior to 3.12.1 allows man-in-the-middle malicious users to conduct message skipping attacks and consequently impersonate clients by leveraging missing handshake state validation, aka a "SMACK SKIP-TLS" issue.
Mono-project MonoDebian Debian Linux 6.0
605
VMScore
CVE-2010-1526
Multiple integer overflows in libgdiplus 2.6.7, as used in Mono, allow malicious users to execute arbitrary code via (1) a crafted TIFF file, related to the gdip_load_tiff_image function in tiffcodec.c; (2) a crafted JPEG file, related to the gdip_load_jpeg_image_internal functio...
Mono-project Libgdiplus 2.6.7
445
VMScore
CVE-2012-3543
mono 2.10.x ASP.NET Web Form Hash collision DoS
Mono-project MonoCanonical Ubuntu Linux 12.04Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0
356
VMScore
CVE-2019-0757
A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated malicious user to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'.
Microsoft Visual Studio 2017 -Microsoft Nuget 4.9.4Microsoft Nuget 4.3.1Microsoft Nuget 4.4.2Microsoft Nuget 4.7.2Microsoft Nuget 4.8.2Microsoft Nuget 4.5.2Microsoft Nuget 4.6.3Mono-project Mono Framework 5.18.0.223Mono-project Mono Framework 5.20.0Microsoft .net Core Sdk 1.1Microsoft .net Core Sdk 2.1.500Microsoft .net Core Sdk 2.2.100Redhat Enterprise Linux 8.0Redhat Enterprise Linux Eus 8.1Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Tus 8.4
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook