Browse CVEs

CRITICAL 9.8 CVE-2020-12471 MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-US/PhotoGallery.aspx because of deserial… Monox after 5.1.40.5152 Fix from $2,3002020-04-29 HIGH 7.2 CVE-2020-12470 MonoX through 5.1.40.5152 allows administrators to execute arbitrary code by modifying an ASPX template. Monox after 5.1.40.5152 Fix from $1,9502020-04-29 HIGH 7.2 CVE-2020-12473 MonoX through 5.1.40.5152 allows admins to execute arbitrary programs by reconfiguring the Converter Executable setting from ffmpeg.exe to a differen… Monox after 5.1.40.5152 Fix from $1,9502020-04-29 MEDIUM 5.4 CVE-2020-12472 MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description. Monox after 5.1.40.5152 Fix from $1,6002020-04-29 MEDIUM 6.8 CVE-2011-0991 Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of serv… Mono Patch available Fix from $1,6002011-04-13 MEDIUM 5.8 CVE-2011-0989 The RuntimeHelpers.InitializeArray method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, does not properl… Mono Patch available Fix from $1,6002011-04-13 MEDIUM 5.8 CVE-2011-0990 Race condition in the FastCopy optimization in the Array.Copy method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.… Mono Patch available Fix from $1,6002011-04-13 MEDIUM 5.8 CVE-2011-0992 Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of serv… Mono Patch available Fix from $1,6002011-04-13 MEDIUM 5.0 CVE-2010-4225 Unspecified vulnerability in the mod_mono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the source code for .aspx (ASP.… Mono Mitigation only Fix from $1,6002011-01-11 HIGH 7.5 CVE-2010-4254EPSS 14% Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote … Mono after 2.3.0 Fix from $1,9502010-12-06 MEDIUM 6.9 CVE-2010-4159 Untrusted search path vulnerability in metadata/loader.c in Mono 2.8 and earlier allows local users to gain privileges via a Trojan horse shared libr… Mono after 2.6.7 Fix from $1,6002010-11-17 HIGH 7.5 CVE-2007-5197 Buffer overflow in the Mono.Math.BigInteger class in Mono 1.2.5.1 and earlier allows context-dependent attackers to execute arbitrary code via unspec… Mono after 1.2.5.1 Fix from $1,9502007-11-02 MEDIUM 5.0 CVE-2007-5473 StaticFileHandler.cs in System.Web in Mono before 1.2.5.2, when running on Windows, allows remote attackers to obtain source code of sensitive files … Mono after 1.2.5.1 Fix from $1,6002007-10-18 MEDIUM 5.0 CVE-2006-6104EPSS 5% The System.Web class in the XSP for ASP.NET server 1.1 through 2.0 in Mono does not properly verify local pathnames, which allows remote attackers to… Xsp Patch available Fix from $1,6002006-12-21 MEDIUM 6.2 CVE-2006-5072 The System.CodeDom.Compiler classes in Novell Mono create temporary files with insecure permissions, which allows local users to overwrite arbitrary … Mono Patch available Fix from $1,6002006-10-10 MEDIUM 5.0 CVE-2006-2658 Directory traversal vulnerability in the xsp component in mod_mono in Mono/C# web server, as used in SUSE Open-Enterprise-Server 1 and SUSE Linux 9.2… Xsp Mitigation only Fix from $1,6002006-09-12