İçeriğe atla
Noroxi

GFI kayıtları

gfi üreticisine ait 50 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%12
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 19
  3. 22
  4. 23
  5. 24
  6. 25
  7. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

50 kayıt
  • CVE-2024-52875
    44Planlayın

    An issue was discovered in GFI Kerio Control 9.2.5 through 9.4.5.

    YüksekCVSS 8,8Kavram kanıtıEPSS %29

    gfi · kerio control31 Oca 2025

  • CVE-2004-1312
    41Planlayın

    A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote attackers to cause a

    KritikCVSS 10,0İstismar yokEPSS %2

    gfi · mailessentials3 Oca 2005

  • CVE-2021-29281
    40Planlayın

    File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik Web UI plugin which

    KritikCVSS 9,8İstismar yokEPSS %3

    gfi · archiver7 Tem 2022

  • CVE-2025-34070
    40Planlayın

    GFI Kerio Control GFIAgent Missing Authentication on Administrative Interfaces

    KritikCVSS 10,0İstismar yokEPSS %1

    gfi · kerio control2 Tem 2025

  • CVE-2024-11948
    39İzleyin

    GFI Archiver Telerik Web UI Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %1

    gfi · archiver11 Ara 2024

  • CVE-2026-2039
    39İzleyin

    GFI Archiver MArc.Store Missing Authorization Authentication Bypass Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %1

    gfi · archiver20 Şub 2026

  • CVE-2026-2038
    39İzleyin

    GFI Archiver MArc.Core Missing Authorization Authentication Bypass Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %1

    gfi · archiver20 Şub 2026

  • CVE-2025-34069
    38İzleyin

    GFI Kerio Control GFIAgent Authentication Bypass via Proxy Forwarding

    KritikCVSS 9,5İstismar yokEPSS %1

    gfi · kerio control2 Tem 2025

  • CVE-2025-34071
    37İzleyin

    GFI Kerio Control Unsigned System Image Upload Root Code Execution

    KritikCVSS 9,4İstismar yokEPSS %1

    gfi · kerio control2 Tem 2025

  • CVE-2026-2036
    35İzleyin

    GFI Archiver MArc.Store Deserialization of Untrusted Data Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    gfi · archiver20 Şub 2026

  • CVE-2026-2037
    35İzleyin

    GFI Archiver MArc.Core Deserialization of Untrusted Data Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    gfi · archiver20 Şub 2026

  • CVE-2023-25267
    35İzleyin

    An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 (fixed in 10.0.0).

    YüksekCVSS 8,8İstismar yokEPSS %1

    gfi · kerio connect15 Mar 2023

  • CVE-2025-34491
    35İzleyin

    GFI MailEssentials < 21.8 MultiNode Insecure Deserialization

    YüksekCVSS 8,8İstismar yokEPSS %1

    gfi · mailessentials28 Nis 2025

  • CVE-2024-11949
    35İzleyin

    GFI Archiver Store Service Deserialization of Untrusted Data Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    gfi · archiver11 Ara 2024

  • CVE-2024-11947
    35İzleyin

    GFI Archiver Core Service Deserialization of Untrusted Data Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    gfi · archiver11 Ara 2024

  • CVE-2002-1121
    32İzleyin

    SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3

    YüksekCVSS 7,5İstismar yokEPSS %7

    gfi · mailsecurity24 Eyl 2002

  • CVE-2005-3182
    31İzleyin

    Buffer overflow in the HTTP management interface for GFI MailSecurity 8.1 allows remote attackers to execute arbitrary code via long headers

    YüksekCVSS 7,5İstismar yokEPSS %4

    gfi · mailsecurity20 Eki 2005

  • CVE-2025-34489
    31İzleyin

    GFI MailEssentials < 21.8 Local Privilege Escalation

    YüksekCVSS 7,8İstismar yokEPSS %0

    gfi · mailessentials28 Nis 2025

  • CVE-2010-5181
    28İzleyin

    Race condition in VIPRE Antivirus Premium 4.0.3272 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangero

    YüksekCVSS 7,0İstismar yokEPSS %0

    gfi · vipre antivirus25 Ağu 2012

  • CVE-2010-5254
    27İzleyin

    Untrusted search path vulnerability in GFI Backup 3.1 Build 20100730 2009 Home Edition allows local users to gain privileges via a Trojan ho

    OrtaCVSS 6,9İstismar yokEPSS %0

    gfi · gfi backup 20097 Eyl 2012

  • CVE-2017-7440
    26İzleyin

    Kerio Connect 8.0.0 through 9.2.2, and Kerio Connect Client desktop application for Windows and Mac 9.2.0 through 9.2.2, when e-mail preview

    OrtaCVSS 6,5İstismar yokEPSS %1

    gfi · kerio connect2 May 2017

  • CVE-2025-34490
    26İzleyin

    GFI MailEssentials < 21.8 XXE Arbitrary File Read

    OrtaCVSS 6,5İstismar yokEPSS %1

    gfi · mailessentials28 Nis 2025

  • CVE-2026-23758
    25İzleyin

    GFI HelpDesk < 4.99.9 Stored XSS via editsubject Parameter

    OrtaCVSS 6,4İstismar yokEPSS %0

    gfi · helpdesk20 Nis 2026

  • CVE-2019-16414
    24İzleyin

    A DOM based XSS in GFI Kerio Control v9.3.0 allows embedding of malicious code and manipulating the login page to send back a victim's clear

    OrtaCVSS 6,1İstismar yokEPSS %2

    gfi · kerio control30 Eyl 2019

  • CVE-2026-23621
    21İzleyin

    GFI MailEssentials AI < 22.4 ListServer.IsPathExist() Absolute Directory Traversal to File Enumeration

    OrtaCVSS 5,3İstismar yokEPSS %0

    gfi · mailessentials19 Şub 2026