mono

Records22All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

mono records in CISA KEV

No mono vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mono 15 records MEDIUM Monox 4 records MEDIUM Xsp 2 records LOW

Records

4 records in Monox · all components

TI-2020-09972 CVE-2020-12471 · GHSA-f842-vw35-9x42

MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or…

MEDIUM 47

MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-US/PhotoGallery.aspx because of deserialization in ModuleGallery.HTML5Upload, ModuleGallery.SilverLightUploadMo…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02764 Published 2020-04-29 No fix listed CWE-502

TI-2020-09974 CVE-2020-12473 · GHSA-4f8g-q626-3w4p

MonoX through 5.1.40.5152 allows admins to execute arbitrary programs by reconfiguring…

LOW 35

MonoX through 5.1.40.5152 allows admins to execute arbitrary programs by reconfiguring the Converter Executable setting from ffmpeg.exe to a different program.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01439 Published 2020-04-29 No fix listed

TI-2020-09971 CVE-2020-12470 · GHSA-f474-36w6-3656

MonoX through 5.1.40.5152 allows administrators to execute arbitrary code by modifying an ASPX template.

LOW 35

MonoX through 5.1.40.5152 allows administrators to execute arbitrary code by modifying an ASPX template.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01674 Published 2020-04-29 No fix listed CWE-552

TI-2020-09973 CVE-2020-12472 · GHSA-fcxq-9gwp-5w5v

MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description.

LOW 25

MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00531 Published 2020-04-29 No fix listed CWE-79

Open these records in search →