Skip to content
Noroxi

altn records

25 published records for vendor altn.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 4%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 21
  3. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

25 records
  • CVE-2008-1358
    43Plan

    Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to execute arbitrary co

    MediumCVSS 6.5WeaponizedEPSS 57%

    altn · mdaemonMar 17, 2008

  • CVE-2022-37242
    39Monitor

    MDaemon Technologies SecurityGateway for Email Servers 8.5.2, is vulnerable to HTTP Response splitting via the data parameter.

    CriticalCVSS 9.8No exploitEPSS 1%

    altn · security gateway for email serversAug 25, 2022

  • CVE-2022-37240
    39Monitor

    MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to HTTP Response splitting via the format parameter.

    CriticalCVSS 9.8No exploitEPSS 1%

    altn · security gateway for email serversAug 25, 2022

  • CVE-2021-27182
    35Monitor

    An issue was discovered in MDaemon before 20.0.4.

    HighCVSS 8.8No exploitEPSS 1%

    altn · mdaemonApr 14, 2021

  • CVE-2018-17792
    35Monitor

    MDaemon Webmail (formerly WorldClient) has CSRF.

    HighCVSS 8.8No exploitEPSS 1%

    altn · mdaemon webmailJul 19, 2019

  • CVE-2021-27181
    35Monitor

    An issue was discovered in MDaemon before 20.0.4.

    HighCVSS 8.8No exploitEPSS 0%

    altn · mdaemonApr 14, 2021

  • CVE-2019-13612
    30Monitor

    MDaemon Email Server 19 through 20.0.1 skips SpamAssassin checks by default for e-mail messages larger than 2 MB (and limits checks to 10 MB

    HighCVSS 7.5No exploitEPSS 1%

    altn · mdaemon email serverJul 16, 2019

  • CVE-2021-27183
    29Monitor

    An issue was discovered in MDaemon before 20.0.4.

    HighCVSS 7.2No exploitEPSS 2%

    altn · mdaemonApr 14, 2021

  • CVE-2008-2631
    27Monitor

    The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service (NULL pointer dereference

    MediumCVSS 5.0Proof of conceptEPSS 22%

    altn · mdaemonJun 9, 2008

  • CVE-2021-27180
    24Monitor

    An issue was discovered in MDaemon before 20.0.4.

    MediumCVSS 6.1Proof of conceptEPSS 0%

    altn · mdaemonApr 14, 2021

  • CVE-2019-8983
    24Monitor

    MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 1 of 2).

    MediumCVSS 6.1No exploitEPSS 0%

    altn · mdaemonFeb 21, 2019

  • CVE-2019-8984
    24Monitor

    MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 2 of 2).

    MediumCVSS 6.1No exploitEPSS 0%

    altn · mdaemonFeb 21, 2019

  • CVE-2022-25356
    23Monitor

    Alt-N MDaemon Security Gateway through 8.5.0 allows SecurityGateway.dll?view=login XML Injection.

    MediumCVSS 5.3Proof of conceptEPSS 5%

    altn · securitygatewayApr 4, 2022

  • CVE-2020-18723
    22Monitor

    Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code on the email recipie

    MediumCVSS 5.4Proof of conceptEPSS 3%

    altn · mdaemon webmailFeb 3, 2021

  • CVE-2020-18724
    22Monitor

    Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19.5.5 allows an attac

    MediumCVSS 5.4Proof of conceptEPSS 3%

    altn · mdaemon webmailFeb 3, 2021

  • CVE-2022-37245
    21Monitor

    MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the Blacklist endpoint.

    MediumCVSS 5.4No exploitEPSS 0%

    altn · security gateway for email serversAug 25, 2022

  • CVE-2022-37239
    21Monitor

    MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the rulles_list_ajax endpoint.

    MediumCVSS 5.4No exploitEPSS 0%

    altn · security gateway for email serversAug 25, 2022

  • CVE-2022-37241
    21Monitor

    MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the data_leak_list_ajax endpoin

    MediumCVSS 5.4No exploitEPSS 0%

    altn · security gateway for email serversAug 25, 2022

  • CVE-2022-37243
    21Monitor

    MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the whitelist endpoint.

    MediumCVSS 5.4No exploitEPSS 0%

    altn · security gateway for email serversAug 25, 2022

  • CVE-2019-19497
    21Monitor

    MDaemon Email Server 17.5.1 allows XSS via the filename of an attachment to an email message.

    MediumCVSS 5.4No exploitEPSS 0%

    altn · mdaemon email serverDec 17, 2019

  • CVE-2022-37244
    21Monitor

    MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRequest parameter.

    MediumCVSS 5.4No exploitEPSS 0%

    altn · security gateway for email serversAug 25, 2022

  • CVE-2022-37238
    21Monitor

    MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the currentRequest parameter.

    MediumCVSS 5.4No exploitEPSS 0%

    altn · security gateway for email serversAug 25, 2022

  • CVE-2022-29976
    21Monitor

    An Authenticated Reflected Cross-site scripting at BCC Parameter was discovered in MDaemon before 22.0.0 .

    MediumCVSS 5.4No exploitEPSS 0%

    altn · mdaemonMay 11, 2022

  • CVE-2022-29975
    21Monitor

    An Authenticated Reflected Cross-site scripting at CC Parameter was discovered in MDaemon before 22.0.0 .

    MediumCVSS 5.4No exploitEPSS 0%

    altn · mdaemonMay 11, 2022

  • CVE-2012-2584
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbitrary web script or HT

    MediumCVSS 4.3Proof of conceptEPSS 3%

    altn · mdaemonAug 12, 2012