CVE-2020-12471 | Critical | 9.8 | 2020-04-29 | MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-US/PhotoGallery.aspx because of deserialization in… |
CVE-2020-12470 | High | 7.2 | 2020-04-29 | MonoX through 5.1.40.5152 allows administrators to execute arbitrary code by modifying an ASPX template. |
CVE-2020-12473 | High | 7.2 | 2020-04-29 | MonoX through 5.1.40.5152 allows admins to execute arbitrary programs by reconfiguring the Converter Executable setting from ffmpeg.exe to a different program. |
CVE-2020-12472 | Medium | 5.4 | 2020-04-29 | MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description. |
CVE-2012-3543 | High | 7.5 | 2019-11-21 | mono 2.10.x ASP.NET Web Form Hash collision DoS |
CVE-2012-3382 | | | 2012-07-12 | Cross-site scripting (XSS) vulnerability in the ProcessRequest function in mcs/class/System.Web/System.Web/HttpForbiddenHandler.cs in Mono 2.10.8 and earlier a… |
CVE-2011-0992 | | | 2011-04-13 | Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service (plugi… |
CVE-2011-0991 | | | 2011-04-13 | Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service or pos… |
CVE-2011-0990 | | | 2011-04-13 | Race condition in the FastCopy optimization in the Array.Copy method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used… |
CVE-2011-0989 | | | 2011-04-13 | The RuntimeHelpers.InitializeArray method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, does not properly restrict… |
CVE-2010-4225 | | | 2011-01-11 | Unspecified vulnerability in the mod_mono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the source code for .aspx (ASP.NET) appli… |
CVE-2010-4254 | | | 2010-12-06 | Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers… |
CVE-2010-4159 | | | 2010-11-17 | Untrusted search path vulnerability in metadata/loader.c in Mono 2.8 and earlier allows local users to gain privileges via a Trojan horse shared library in the… |
CVE-2010-1459 | | | 2010-05-27 | The default configuration of ASP.NET in Mono before 2.6.4 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cr… |
CVE-2008-3906 | | | 2008-09-04 | CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting at… |
CVE-2008-3422 | | | 2008-07-31 | Multiple cross-site scripting (XSS) vulnerabilities in the ASP.net class libraries in Mono 2.0 and earlier allow remote attackers to inject arbitrary web scrip… |
CVE-2007-5197 | | | 2007-11-02 | Buffer overflow in the Mono.Math.BigInteger class in Mono 1.2.5.1 and earlier allows context-dependent attackers to execute arbitrary code via unspecified vect… |
CVE-2007-5473 | | | 2007-10-18 | StaticFileHandler.cs in System.Web in Mono before 1.2.5.2, when running on Windows, allows remote attackers to obtain source code of sensitive files via a requ… |
CVE-2006-6104 | | | 2006-12-21 | The System.Web class in the XSP for ASP.NET server 1.1 through 2.0 in Mono does not properly verify local pathnames, which allows remote attackers to (1) read… |
CVE-2006-5072 | | | 2006-10-10 | The System.CodeDom.Compiler classes in Novell Mono create temporary files with insecure permissions, which allows local users to overwrite arbitrary files or e… |
CVE-2006-2658 | | | 2006-09-12 | Directory traversal vulnerability in the xsp component in mod_mono in Mono/C# web server, as used in SUSE Open-Enterprise-Server 1 and SUSE Linux 9.2 through 1… |
CVE-2005-0509 | | | 2005-03-14 | Multiple cross-site scripting (XSS) vulnerabilities in the Mono 1.0.5 implementation of ASP.NET (.Net) allow remote attackers to inject arbitrary HTML or web s… |