mail.ru records
2 published records for vendor mail.ru.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-310 Cryptographic Issues1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
21Monitor | CVE-2016-10716No exploit | The Mail.ru Calendar plugin before 2.5.0.61 for Atlassian Jira has XSS via the Name field in a Create Calender action, related to a MailRuCamail.ru · calendar · CWE-79 | Medium5.4 | — | 0.7% | Mar 16, 2018 |
21Monitor | CVE-2014-5804No exploit | The Mail.Ru Dating (aka ru.mail.love) application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-themail.ru · mail.ru dating · CWE-310 | Medium5.4 | — | 0.2% | Sep 9, 2014 |
- CVE-2016-1071621Monitor
The Mail.ru Calendar plugin before 2.5.0.61 for Atlassian Jira has XSS via the Name field in a Create Calender action, related to a MailRuCa
MediumCVSS 5.4No exploitEPSS 0%mail.ru · calendarMar 16, 2018
- CVE-2014-580421Monitor
The Mail.Ru Dating (aka ru.mail.love) application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the
MediumCVSS 5.4No exploitEPSS 0%mail.ru · mail.ru datingSep 9, 2014