CVE-2009-0217

CVE-2009-0217 arises from the XML Digital Signature processing where a parameter (HMACOutputLength) does not enforce a minimum length, enabling signature spoofing and authentication bypass across multiple products (e.g., XML-DSig implementations in Oracle, BEA WebLogic, Mono, XML Security Library...

CVE-2008-3422

CVE-2008-3422 is a known XSS vulnerability in the ASP.NET class libraries of Mono 2.0 and earlier, exploitable via crafted attributes in HtmlControl, HtmlForm, HtmlInputButton, HtmlInputRadioButton, and HtmlSelect. Connected notes from SUSE/Mandriva advisories reiterate this issue (alongside CVE-...

CVE-2008-3906

CVE-2008-3906 is a CRLF injection vulnerability in Mono’s Sys.Web (versions 2.0 and earlier) that enables remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting via CRLF sequences in the query string. Multiple advisories (Mandriva MDVSA-2008:210-1, Ubuntu USN-826-1,...