GCVE - cpe:2.3:a:mono:mono:1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mono:mono:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Mono (`3bbce7e0-7556-583d-80fe-8a58f0664762`)
Product	Mono (`c04cbf14-76d6-5757-81b8-fac7c13985e5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-4159`	vulnerable	2026-06-08 04:55:19.076355	Details available Untrusted search path vulnerability in metadata/loader.c in Mono 2.8 and earlier allows local users to gain privileges via a Trojan horse shared library in the current working directory. Published: 2010-11-17T15:00:00.000Z Updated: 2024-08-07T03:34:37.455Z Open on db.gcve.eu Reference links https://github.com/mono/mono/commit/8e890a3bf80a4620e417814dc14886b1bbd17625 http://www.vupen.com/english/advisories/2010/3059 http://lists.ximian.com/pipermail/mono-patches/2010-October/177900.html http://marc.info/?l=oss-security&m=128941802415318&w=2 http://www.mandriva.com/security/advisories?name=MDVSA-2010:240	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1459`	vulnerable	2026-06-08 04:54:08.260078	Details available The default configuration of ASP.NET in Mono before 2.6.4 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by the __VIEWSTATE parameter to 2.0/menu/menu1.aspx in the XSP sample project. Published: 2010-05-27T18:32:00.000Z Updated: 2024-08-07T01:28:40.693Z Open on db.gcve.eu Reference links http://www.mono-project.com/Vulnerabilities#ASP.NET_View_State_Cross-Site_Scripting http://www.communities.hp.com/securitysoftware/blogs/spilabs/archive/2010/04/29/asp-net-cross-site-scripting-followup-mono.aspx http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html http://www.securityfocus.com/bid/40351 http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3906`	vulnerable	2026-06-08 04:50:37.144384	Details available CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the query string. Published: 2008-09-04T17:00:00.000Z Updated: 2024-08-07T09:53:00.711Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/30867 https://exchange.xforce.ibmcloud.com/vulnerabilities/44740 http://secunia.com/advisories/36494 http://www.openwall.com/lists/oss-security/2008/08/27/6 http://www.vupen.com/english/advisories/2008/2443	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3422`	vulnerable	2026-06-08 04:50:34.560664	Details available Multiple cross-site scripting (XSS) vulnerabilities in the ASP.net class libraries in Mono 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted attributes related to (1) HtmlControl.cs (PreProcessRelativeReference), (2) HtmlForm.cs (RenderAttributes), (3) HtmlInputButton (RenderAttributes), (4) HtmlInputRadioButton (RenderAttributes), and (5) HtmlSelect (RenderChildren). Published: 2008-07-31T21:00:00.000Z Updated: 2024-08-07T09:37:26.952Z Open on db.gcve.eu Reference links http://secunia.com/advisories/36494 http://secunia.com/advisories/31982 https://bugzilla.novell.com/show_bug.cgi?id=413534 http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html http://secunia.com/advisories/31338	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-5197`	vulnerable	2026-06-08 04:50:04.570844	Details available Buffer overflow in the Mono.Math.BigInteger class in Mono 1.2.5.1 and earlier allows context-dependent attackers to execute arbitrary code via unspecified vectors related to Reduce in Montgomery-based Pow methods. Published: 2007-11-02T16:00:00.000Z Updated: 2024-08-07T15:24:42.132Z Open on db.gcve.eu Reference links http://www.gentoo.org/security/en/glsa/glsa-200711-10.xml https://exchange.xforce.ibmcloud.com/vulnerabilities/38248 http://secunia.com/advisories/27493 http://www.securityfocus.com/bid/26279 http://bugs.gentoo.org/attachment.cgi?id=134361&action=view	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5072`	vulnerable	2026-06-08 04:49:19.632065	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.