Skip to content
Noroxi

merak records

25 published records for vendor merak.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    25 records
    • CVE-2009-0350
      40Plan

      Stack-based buffer overflow in Merak Media Player 3.2 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist

      CriticalCVSS 9.3Proof of conceptEPSS 10%

      merak · media playerJan 29, 2009

    • CVE-2005-4556
      33Monitor

      PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0

      HighCVSS 7.5Proof of conceptEPSS 10%

      icewarp · web mailDec 28, 2005

    • CVE-2004-1722
      31Monitor

      SQL injection vulnerability in calendar.html in Merak Mail Server 5.2.7 allows remote attackers to execute arbitrary SQL statements via the

      HighCVSS 7.5Proof of conceptEPSS 2%

      merak · mail serverAug 17, 2004

    • CVE-2004-1670
      31Monitor

      Multiple directory traversal vulnerabilities Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7, and possibly other versions, allow remote

      HighCVSS 7.5No exploitEPSS 1%

      icewarp · web mailSep 10, 2004

    • CVE-2004-1674
      30Monitor

      viewaction.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to (1) delete arb

      HighCVSS 7.5No exploitEPSS 1%

      icewarp · web mailOct 12, 2004

    • CVE-2002-0258
      30Monitor

      Merak Mail IceWarp Web Mail uses a static identifier as a user session ID that does not change across sessions, which could allow remote att

      HighCVSS 7.5No exploitEPSS 1%

      icewarp · web mailMay 29, 2002

    • CVE-2005-4558
      29Monitor

      IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly restrict accep

      MediumCVSS 6.5Proof of conceptEPSS 8%

      icewarp · web mailDec 28, 2005

    • CVE-2005-0322
      28Monitor

      MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak encryption in the (1) us

      HighCVSS 7.2No exploitEPSS 0%

      icewarp · web mailMay 2, 2005

    • CVE-2005-4557
      23Monitor

      dir/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, allows remot

      MediumCVSS 5.0Proof of conceptEPSS 9%

      icewarp · web mailDec 28, 2005

    • CVE-2005-4559
      23Monitor

      mail/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not pr

      MediumCVSS 5.0Proof of conceptEPSS 8%

      icewarp · web mailDec 28, 2005

    • CVE-2004-1720
      22Monitor

      The (1) address.html and possibly (2) calendar.html pages in Merak Mail Server 5.2.7 allow remote attackers to gain sensitive information vi

      MediumCVSS 5.0Proof of conceptEPSS 7%

      merak · mail serverAug 17, 2004

    • CVE-2005-3133
      22Monitor

      Multiple directory traversal vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows

      MediumCVSS 5.0Proof of conceptEPSS 6%

      icewarp · web mailOct 4, 2005

    • CVE-2006-0817
      22Monitor

      Absolute path directory traversal vulnerability in (a) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (b) VisNe

      MediumCVSS 5.0No exploitEPSS 5%

      icewarp · web mailJul 21, 2006

    • CVE-2004-1721
      21Monitor

      The (1) function.php or (2) function.view.php scripts in Merak Mail Server 5.2.7 allow remote attackers to read arbitrary PHP files via a di

      MediumCVSS 5.0No exploitEPSS 2%

      merak · mail serverAug 17, 2004

    • CVE-2005-3132
      20Monitor

      MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to obtain sensitive information

      MediumCVSS 5.0No exploitEPSS 1%

      icewarp · web mailOct 4, 2005

    • CVE-2005-1489
      20Monitor

      Unknown vulnerability in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to obtain the full path of th

      MediumCVSS 5.0No exploitEPSS 1%

      icewarp · web mailMay 11, 2005

    • CVE-2004-1719
      19Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbitrary web script or H

      MediumCVSS 4.3Proof of conceptEPSS 5%

      merak · mail serverAug 17, 2004

    • CVE-2005-3131
      18Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions,

      MediumCVSS 4.3Proof of conceptEPSS 3%

      icewarp · web mailOct 4, 2005

    • CVE-2008-0218
      18Monitor

      Cross-site scripting (XSS) vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to inject arbitrary web sc

      MediumCVSS 4.3Proof of conceptEPSS 2%

      merak · icewarp mail serverJan 10, 2008

    • CVE-2005-1491
      18Monitor

      Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to (1) move their home directory via viewaction.html o

      MediumCVSS 4.6No exploitEPSS 0%

      icewarp · web mailMay 11, 2005

    • CVE-2006-0818
      17Monitor

      Absolute path directory traversal vulnerability in (1) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (2) VisNe

      MediumCVSS 4.0No exploitEPSS 2%

      icewarp · web mailJul 21, 2006

    • CVE-2004-1669
      17Monitor

      Cross-site scripting (XSS) vulnerability in MERAK Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote at

      MediumCVSS 4.3No exploitEPSS 1%

      icewarp · web mailSep 10, 2004

    • CVE-2005-0321
      8Monitor

      MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allows remote authenticated users to gain sensitive information via an HTTP request to (

      LowCVSS 2.1No exploitEPSS 0%

      icewarp · web mailMay 2, 2005

    • CVE-2005-1490
      8Monitor

      Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2, when the mailbox.dat file does not exist, allows remote authenticated users to determin

      LowCVSS 2.1No exploitEPSS 0%

      icewarp · web mailMay 11, 2005

    • CVE-2005-1488
      7Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allow remote authenticated users

      LowCVSS 1.9No exploitEPSS 0%

      icewarp · web mailMay 11, 2005