Skip to content
Noroxi

code-crafters records

7 published records for vendor code-crafters.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 14.3%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    7 records
    • CVE-2004-1626
      40Plan

      Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a long STOR comma

      MediumCVSS 5.0WeaponizedEPSS 67%

      code-crafters · ability serverOct 22, 2004

    • CVE-2004-1627
      34Monitor

      Buffer overflow in Ability Server 2.25, 2.32, 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a lon

      HighCVSS 7.5Proof of conceptEPSS 15%

      code-crafters · ability serverOct 22, 2004

    • CVE-2004-2495
      32Monitor

      The (1) Webmail, (2) admin, and (3) SMTP services in Ability Mail Server 1.18 allow remote attackers to cause a denial of service (CPU consu

      HighCVSS 7.8No exploitEPSS 2%

      code-crafters · ability mail serverDec 31, 2004

    • CVE-2009-3445
      21Monitor

      Unspecified vulnerability in Code-Crafters Ability Mail Server before 2.70 allows remote attackers to cause a denial of service (daemon cras

      MediumCVSS 5.0No exploitEPSS 2%

      code-crafters · ability mail serverSep 28, 2009

    • CVE-2004-2494
      18Monitor

      Cross-site scripting (XSS) vulnerability in _error in Ability Mail Server 1.18 allows remote attackers to inject arbitrary web script or HTM

      MediumCVSS 4.3Proof of conceptEPSS 2%

      code-crafters · ability mail serverDec 31, 2004

    • CVE-2013-6162
      17Monitor

      Cross-site scripting (XSS) vulnerability in Code-Crafters Ability Mail Server 3.1.1 allows remote attackers to inject arbitrary web script o

      MediumCVSS 4.3Proof of conceptEPSS 1%

      code-crafters · ability mail serverDec 20, 2013

    • CVE-2007-6101
      16Monitor

      Ability Mail Server before 2.61 allows remote authenticated users to cause a denial of service (daemon crash) via (1) malformed number list

      MediumCVSS 4.0No exploitEPSS 1%

      code-crafters · ability mail serverNov 23, 2007