Skip to content
Noroxi

Citadel records

16 published records for vendor citadel.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
5
With a fix record
12.5%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

16 records
  • CVE-2004-1192
    44Plan

    Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via for

    CriticalCVSS 10.0Proof of conceptEPSS 11%

    citadel · uxJan 10, 2005

  • CVE-2002-0432
    42Plan

    Buffer overflow in (1) lprintf and (2) cprintf in sysdep.c of Citadel/UX 5.90 and earlier allows remote attackers to cause a denial of servi

    CriticalCVSS 10.0No exploitEPSS 5%

    citadel · uxJul 26, 2002

  • CVE-2020-27739
    40Plan

    A Weak Session Management vulnerability in Citadel WebCit through 926 allows unauthenticated remote attackers to hijack recently logged-in u

    CriticalCVSS 9.8No exploitEPSS 1%

    citadel · webcitOct 28, 2020

  • CVE-2008-0394
    34Monitor

    Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RCPT TO command, which

    HighCVSS 7.5Proof of conceptEPSS 11%

    citadel · smtpJan 23, 2008

  • CVE-2007-3821
    31Monitor

    Cross-site request forgery (CSRF) vulnerability in Webcit before 7.11 allows remote attackers to modify configurations and perform other act

    HighCVSS 7.5No exploitEPSS 2%

    citadel · webcitJul 16, 2007

  • CVE-2009-0364
    31Monitor

    Format string vulnerability in the mini_calendar component in Citadel.org WebCit 7.22, and other versions before 7.39, allows remote attacke

    HighCVSS 7.5No exploitEPSS 2%

    citadel · webcitMar 26, 2009

  • CVE-2020-27742
    26Monitor

    An Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows authenticated remote attackers to read someone else's

    MediumCVSS 6.5No exploitEPSS 1%

    citadel · webcitOct 28, 2020

  • CVE-2020-27741
    24Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Citadel WebCit through 926 allow remote attackers to inject arbitrary web script or H

    MediumCVSS 6.1No exploitEPSS 1%

    citadel · webcitOct 28, 2020

  • CVE-2020-29547
    23Monitor

    An issue was discovered in Citadel through webcit-926.

    MediumCVSS 5.9No exploitEPSS 0%

    citadel · webcitMay 29, 2023

  • CVE-2004-1705
    21Monitor

    Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of service via a long username.

    MediumCVSS 5.0Proof of conceptEPSS 4%

    citadel · uxJul 30, 2004

  • CVE-2011-1756
    21Monitor

    modules/xmpp/serv_xmpp.c in Citadel 7.86 and earlier does not properly detect recursion during entity expansion, which allows remote attacke

    MediumCVSS 5.0No exploitEPSS 2%

    citadel · citadelJun 20, 2011

  • CVE-2020-27740
    21Monitor

    Citadel WebCit through 926 allows unauthenticated remote attackers to enumerate valid users within the platform.

    MediumCVSS 5.3No exploitEPSS 1%

    citadel · webcitOct 28, 2020

  • CVE-2023-44272
    21Monitor

    A cross-site scripting vulnerability exists in Citadel versions prior to 994.

    MediumCVSS 5.4No exploitEPSS 0%

    citadel · citadelOct 4, 2023

  • CVE-2021-37845
    14Monitor

    An issue was discovered in Citadel through webcit-932.

    LowCVSS 3.7No exploitEPSS 0%

    citadel · webcitMay 29, 2023

  • CVE-2007-3822
    11Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Webcit before 7.11 allow remote attackers to inject arbitrary web script or HTML via

    LowCVSS 2.6Proof of conceptEPSS 2%

    citadel · webcitJul 16, 2007

  • CVE-2004-1933
    8Monitor

    Citadel/UX 5.00 through 6.14 installs the database directory and files with world-read permissions, which could allow local users to bypass

    LowCVSS 2.1No exploitEPSS 0%

    citadel · uxApr 12, 2004