MailCleaner records
10 published records for vendor mailcleaner.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 10%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-862 Missing Authorization1
The weakness classes this vendor ships most often: where to look.
CWEAll records
10 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
51Plan | CVE-2018-20323Weaponized | www/soap/application/MCSoap/Logs.php in MailCleaner Community Edition 2018.08 allows remote attackers to execute arbitrary OS commands.mailcleaner · mailcleaner · CWE-78 | High8.8 | — | 54.4% | Mar 21, 2019 |
41Plan | CVE-2024-3191No exploit | MailCleaner Email os command injectionmailcleaner · mailcleaner · CWE-78 | Critical9.8 | — | 5.1% | Apr 29, 2024 |
39Monitor | CVE-2024-55560No exploit | MailCleaner before 28d913e has default values of ssh_host_dsa_key, ssh_host_rsa_key, and ssh_host_ed25519_key that persist after installatio | Critical9.8 | — | 0.5% | Dec 8, 2024 |
38Monitor | CVE-2024-3192No exploit | MailCleaner Admin Interface cross site scriptingmailcleaner · mailcleaner · CWE-79 | Critical9.6 | — | 0.9% | Apr 29, 2024 |
36Monitor | CVE-2024-3193No exploit | MailCleaner Admin Endpoints os command injectionmailcleaner · mailcleaner · CWE-78 | High8.8 | — | 4.2% | Apr 29, 2024 |
30Monitor | CVE-2019-1010246No exploit | MailCleaner before c888fbb6aaa7c5f8400f637bcf1cbb844de46cd9 is affected by: Unauthenticated MySQL database password information disclosure.mailcleaner · mailcleaner · CWE-862 | High7.5 | — | 1.4% | Jul 18, 2019 |
28Monitor | CVE-2024-3195No exploit | MailCleaner Admin Endpoints path traversalmailcleaner · mailcleaner · CWE-22 | High7.2 | — | 0.9% | Apr 29, 2024 |
26Monitor | CVE-2024-3196No exploit | MailCleaner SOAP Service dumpConfiguration os command injectionmailcleaner · mailcleaner · CWE-78 | Medium6.7 | — | 1.6% | Apr 29, 2024 |
24Monitor | CVE-2018-18635No exploit | www/guis/admin/application/controllers/UserController.php in the administration login interface in MailCleaner CE 2018.08 and 2018.09 allowsmailcleaner · mailcleaner · CWE-79 | Medium6.1 | — | 0.9% | Oct 24, 2018 |
24Monitor | CVE-2024-3194No exploit | MailCleaner Log File Endpoint cross site scriptingmailcleaner · mailcleaner · CWE-79 | Medium6.1 | — | 0.7% | Apr 29, 2024 |
- CVE-2018-2032351Plan
www/soap/application/MCSoap/Logs.php in MailCleaner Community Edition 2018.08 allows remote attackers to execute arbitrary OS commands.
HighCVSS 8.8WeaponizedEPSS 54%mailcleaner · mailcleanerMar 21, 2019
- CVE-2024-319141Plan
MailCleaner Email os command injection
CriticalCVSS 9.8No exploitEPSS 5%mailcleaner · mailcleanerApr 29, 2024
- CVE-2024-5556039Monitor
MailCleaner before 28d913e has default values of ssh_host_dsa_key, ssh_host_rsa_key, and ssh_host_ed25519_key that persist after installatio
CriticalCVSS 9.8No exploitEPSS 0%Dec 8, 2024
- CVE-2024-319238Monitor
MailCleaner Admin Interface cross site scripting
CriticalCVSS 9.6No exploitEPSS 0%mailcleaner · mailcleanerApr 29, 2024
- CVE-2024-319336Monitor
MailCleaner Admin Endpoints os command injection
HighCVSS 8.8No exploitEPSS 4%mailcleaner · mailcleanerApr 29, 2024
- CVE-2019-101024630Monitor
MailCleaner before c888fbb6aaa7c5f8400f637bcf1cbb844de46cd9 is affected by: Unauthenticated MySQL database password information disclosure.
HighCVSS 7.5No exploitEPSS 1%mailcleaner · mailcleanerJul 18, 2019
- CVE-2024-319528Monitor
MailCleaner Admin Endpoints path traversal
HighCVSS 7.2No exploitEPSS 0%mailcleaner · mailcleanerApr 29, 2024
- CVE-2024-319626Monitor
MailCleaner SOAP Service dumpConfiguration os command injection
MediumCVSS 6.7No exploitEPSS 1%mailcleaner · mailcleanerApr 29, 2024
- CVE-2018-1863524Monitor
www/guis/admin/application/controllers/UserController.php in the administration login interface in MailCleaner CE 2018.08 and 2018.09 allows
MediumCVSS 6.1No exploitEPSS 0%mailcleaner · mailcleanerOct 24, 2018
- CVE-2024-319424Monitor
MailCleaner Log File Endpoint cross site scripting
MediumCVSS 6.1No exploitEPSS 0%mailcleaner · mailcleanerApr 29, 2024