isync project records
4 published records for vendor isync project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-310 Cryptographic Issues1
- CWE-704 Incorrect Type Conversion or Cast1
- CWE-787 Out-of-bounds Write1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2021-44143No exploit | A flaw was found in mbsync in isync 1.4.0 through 1.4.3.isync project · isync · CWE-787 | Critical9.8 | — | 3.7% | Nov 22, 2021 |
40Plan | CVE-2021-3657No exploit | A flaw was found in mbsync versions prior to 1.4.4.isync project · isync · CWE-119 | Critical9.8 | — | 3.4% | Feb 18, 2022 |
31Monitor | CVE-2021-3578No exploit | A flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a malicious or compromised server to write an arisync project · isync · CWE-704 | High7.8 | — | 1.0% | Feb 16, 2022 |
17Monitor | CVE-2013-0289No exploit | Isync 0.4 before 1.0.6, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName fisync project · isync · CWE-310 | Medium4.3 | — | 1.3% | May 23, 2014 |
- CVE-2021-4414340Plan
A flaw was found in mbsync in isync 1.4.0 through 1.4.3.
CriticalCVSS 9.8No exploitEPSS 3%isync project · isyncNov 22, 2021
- CVE-2021-365740Plan
A flaw was found in mbsync versions prior to 1.4.4.
CriticalCVSS 9.8No exploitEPSS 3%isync project · isyncFeb 18, 2022
- CVE-2021-357831Monitor
A flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a malicious or compromised server to write an ar
HighCVSS 7.8No exploitEPSS 1%isync project · isyncFeb 16, 2022
- CVE-2013-028917Monitor
Isync 0.4 before 1.0.6, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName f
MediumCVSS 4.3No exploitEPSS 1%isync project · isyncMay 23, 2014