Skip to content
Noroxi

mhonarc records

5 published records for vendor mhonarc.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
100%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    5 records
    • CVE-2002-0738
      31Monitor

      MHonArc 2.5.2 and earlier does not properly filter Javascript from archived e-mail messages, which could allow remote attackers to execute s

      HighCVSS 7.5No exploitEPSS 2%

      mhonarc · mhonarcAug 12, 2002

    • CVE-2002-1307
      28Monitor

      Cross-site scripting vulnerability (XSS) in MHonArc 2.5.12 and earlier allows remote attackers to insert script or HTML via an email message

      MediumCVSS 6.8Proof of conceptEPSS 4%

      mhonarc · mhonarcNov 29, 2002

    • CVE-2010-1677
      23Monitor

      MHonArc 2.6.16 allows remote attackers to cause a denial of service (CPU consumption) via start tags that are placed within other start tags

      MediumCVSS 5.0Proof of conceptEPSS 8%

      mhonarc · mhonarcJan 3, 2011

    • CVE-2010-4524
      18Monitor

      Cross-site scripting (XSS) vulnerability in lib/mhtxthtml.pl in MHonArc 2.6.16 allows remote attackers to inject arbitrary web script or HTM

      MediumCVSS 4.3No exploitEPSS 2%

      mhonarc · mhonarcJan 3, 2011

    • CVE-2002-1388
      17Monitor

      Cross-site scripting (XSS) vulnerability in MHonArc before 2.5.14 allows remote attackers to inject arbitrary HTML into web archive pages vi

      MediumCVSS 4.3No exploitEPSS 1%

      mhonarc · mhonarcJan 2, 2003