Approved changes feed: RSS · Atom

cpe:2.3:a:mono_project:mono:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMono Project (b95b13f2-2a04-5379-a2dd-b7cc7d5b1f41)
ProductMono (df8ed8be-5e95-5bef-b4d7-45df00f53da8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/mono purl2cpe 2026-06-01 10:16:29.935965
pkg:deb/ubuntu/mono purl2cpe 2026-06-01 10:16:29.935967
pkg:docker/mono purl2cpe 2026-06-01 10:16:29.935969
pkg:github/mono/mono purl2cpe 2026-06-01 10:16:29.935970
pkg:rpm/fedora/mono purl2cpe 2026-06-01 10:16:29.935972
pkg:rpm/opensuse/mono purl2cpe 2026-06-01 10:16:29.935973

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-3906 vulnerable 2026-06-08 04:50:37.144753 Details available
CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the query string.
Published: 2008-09-04T17:00:00.000Z
Updated: 2024-08-07T09:53:00.711Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3422 vulnerable 2026-06-08 04:50:34.566949 Details available
Multiple cross-site scripting (XSS) vulnerabilities in the ASP.net class libraries in Mono 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted attributes related to (1) HtmlControl.cs (PreProcessRelativeReference), (2) HtmlForm.cs (RenderAttributes), (3) HtmlInputButton (RenderAttributes), (4) HtmlInputRadioButton (RenderAttributes), and (5) HtmlSelect (RenderChildren).
Published: 2008-07-31T21:00:00.000Z
Updated: 2024-08-07T09:37:26.952Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.