Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2007-5473

StaticFileHandler.cs in System.Web in Mono before 1.2.5.2, when running on Windows, allows remote attackers to obtain source code of sensitive files via a request containing a trailing (1) space or (2) dot, which is not properly handled by XSP.

CVSS 2.0 · 5.0 Medium EPSS 1.3% KEV · Not listed
Vendors
Microsoft Mono
Products
Windows Mono
CVE-2005-0509

Multiple cross-site scripting (XSS) vulnerabilities in the Mono 1.0.5 implementation of ASP.NET (.Net) allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including ">" and "<".

CVSS 2.0 · 4.3 Medium EPSS 15.9% KEV · Not listed
Vendors
Microsoft Mono
Products
.net Framework Mono
CVE-2023-35373

Mono Authenticode Validation Spoofing Vulnerability

Mono Authenticode Validation Spoofing Vulnerability

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Mono
CVE-2019-0757

dotnet: NuGet Tampering Vulnerability

A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'.

CVSS 3.1 · 6.5 Medium EPSS 2.7% KEV · Not listed
Vendors
Apple Microsoft Mono-project and 1 more
Products
Macos .net Core .net Core Sdk and 8 more