Approved changes feed: RSS · Atom
cpe:2.3:a:mono:mono:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mono (3bbce7e0-7556-583d-80fe-8a58f0664762) |
|---|---|
| Product | Mono (c04cbf14-76d6-5757-81b8-fac7c13985e5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-3543 |
vulnerable | 2026-06-08 05:02:10.586916 |
Details available
mono 2.10.x ASP.NET Web Form Hash collision DoS
Published: 2019-11-21T14:00:56.000Z
Updated: 2024-08-06T20:13:50.119Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3382 |
vulnerable | 2026-06-08 05:02:09.516400 |
Details available
Cross-site scripting (XSS) vulnerability in the ProcessRequest function in mcs/class/System.Web/System.Web/HttpForbiddenHandler.cs in Mono 2.10.8 and earlier allows remote attackers to inject arbitrary web script or HTML via a file with a crafted name and a forbidden extension, which is not properly handled in an error message.
Published: 2012-07-12T21:00:00.000Z
Updated: 2024-08-06T20:05:11.741Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0992 |
vulnerable | 2026-06-08 04:56:40.516888 |
Details available
Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service (plugin crash) or obtain sensitive information via vectors related to member data in a resurrected MonoThread instance.
Published: 2011-04-13T21:00:00.000Z
Updated: 2024-08-06T22:14:26.539Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0991 |
vulnerable | 2026-06-08 04:56:40.516315 |
Details available
Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to finalizing and then resurrecting a DynamicMethod instance.
Published: 2011-04-13T21:00:00.000Z
Updated: 2024-08-06T22:14:26.620Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0990 |
vulnerable | 2026-06-08 04:56:40.515696 |
Details available
Race condition in the FastCopy optimization in the Array.Copy method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to trigger a buffer overflow and modify internal data structures, and cause a denial of service (plugin crash) or corrupt the internal state of the security manager, via a crafted media file in which a thread makes a change after a type check but before a copy action.
Published: 2011-04-13T21:00:00.000Z
Updated: 2024-08-06T22:14:26.600Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0989 |
vulnerable | 2026-06-08 04:56:40.511744 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4254 |
vulnerable | 2026-06-08 04:55:19.584267 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4159 |
vulnerable | 2026-06-08 04:55:19.075401 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-5473 |
vulnerable | 2026-06-08 04:50:06.113815 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-5197 |
vulnerable | 2026-06-08 04:50:04.570324 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.