İçeriğe atla
Noroxi

altn kayıtları

altn üreticisine ait 25 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %4
Pre-auth RCE
0
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 21
  3. 22

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

25 kayıt
  • CVE-2008-1358
    43Planlayın

    Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to execute arbitrary co

    OrtaCVSS 6,5SilahlaştırılmışEPSS %57

    altn · mdaemon17 Mar 2008

  • CVE-2022-37242
    39İzleyin

    MDaemon Technologies SecurityGateway for Email Servers 8.5.2, is vulnerable to HTTP Response splitting via the data parameter.

    KritikCVSS 9,8İstismar yokEPSS %1

    altn · security gateway for email servers25 Ağu 2022

  • CVE-2022-37240
    39İzleyin

    MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to HTTP Response splitting via the format parameter.

    KritikCVSS 9,8İstismar yokEPSS %1

    altn · security gateway for email servers25 Ağu 2022

  • CVE-2021-27182
    35İzleyin

    An issue was discovered in MDaemon before 20.0.4.

    YüksekCVSS 8,8İstismar yokEPSS %2

    altn · mdaemon14 Nis 2021

  • CVE-2018-17792
    35İzleyin

    MDaemon Webmail (formerly WorldClient) has CSRF.

    YüksekCVSS 8,8İstismar yokEPSS %1

    altn · mdaemon webmail19 Tem 2019

  • CVE-2021-27181
    35İzleyin

    An issue was discovered in MDaemon before 20.0.4.

    YüksekCVSS 8,8İstismar yokEPSS %1

    altn · mdaemon14 Nis 2021

  • CVE-2019-13612
    30İzleyin

    MDaemon Email Server 19 through 20.0.1 skips SpamAssassin checks by default for e-mail messages larger than 2 MB (and limits checks to 10 MB

    YüksekCVSS 7,5İstismar yokEPSS %1

    altn · mdaemon email server16 Tem 2019

  • CVE-2021-27183
    29İzleyin

    An issue was discovered in MDaemon before 20.0.4.

    YüksekCVSS 7,2İstismar yokEPSS %3

    altn · mdaemon14 Nis 2021

  • CVE-2008-2631
    27İzleyin

    The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service (NULL pointer dereference

    OrtaCVSS 5,0Kavram kanıtıEPSS %23

    altn · mdaemon9 Haz 2008

  • CVE-2021-27180
    24İzleyin

    An issue was discovered in MDaemon before 20.0.4.

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    altn · mdaemon14 Nis 2021

  • CVE-2019-8983
    24İzleyin

    MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 1 of 2).

    OrtaCVSS 6,1İstismar yokEPSS %1

    altn · mdaemon21 Şub 2019

  • CVE-2019-8984
    24İzleyin

    MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 2 of 2).

    OrtaCVSS 6,1İstismar yokEPSS %1

    altn · mdaemon21 Şub 2019

  • CVE-2022-25356
    23İzleyin

    Alt-N MDaemon Security Gateway through 8.5.0 allows SecurityGateway.dll?view=login XML Injection.

    OrtaCVSS 5,3Kavram kanıtıEPSS %6

    altn · securitygateway4 Nis 2022

  • CVE-2020-18723
    22İzleyin

    Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code on the email recipie

    OrtaCVSS 5,4Kavram kanıtıEPSS %4

    altn · mdaemon webmail3 Şub 2021

  • CVE-2020-18724
    22İzleyin

    Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19.5.5 allows an attac

    OrtaCVSS 5,4Kavram kanıtıEPSS %3

    altn · mdaemon webmail3 Şub 2021

  • CVE-2022-37245
    21İzleyin

    MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the Blacklist endpoint.

    OrtaCVSS 5,4İstismar yokEPSS %1

    altn · security gateway for email servers25 Ağu 2022

  • CVE-2022-37239
    21İzleyin

    MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the rulles_list_ajax endpoint.

    OrtaCVSS 5,4İstismar yokEPSS %1

    altn · security gateway for email servers25 Ağu 2022

  • CVE-2022-37241
    21İzleyin

    MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the data_leak_list_ajax endpoin

    OrtaCVSS 5,4İstismar yokEPSS %1

    altn · security gateway for email servers25 Ağu 2022

  • CVE-2022-37243
    21İzleyin

    MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the whitelist endpoint.

    OrtaCVSS 5,4İstismar yokEPSS %1

    altn · security gateway for email servers25 Ağu 2022

  • CVE-2019-19497
    21İzleyin

    MDaemon Email Server 17.5.1 allows XSS via the filename of an attachment to an email message.

    OrtaCVSS 5,4İstismar yokEPSS %1

    altn · mdaemon email server17 Ara 2019

  • CVE-2022-37244
    21İzleyin

    MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRequest parameter.

    OrtaCVSS 5,4İstismar yokEPSS %1

    altn · security gateway for email servers25 Ağu 2022

  • CVE-2022-37238
    21İzleyin

    MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the currentRequest parameter.

    OrtaCVSS 5,4İstismar yokEPSS %1

    altn · security gateway for email servers25 Ağu 2022

  • CVE-2022-29976
    21İzleyin

    An Authenticated Reflected Cross-site scripting at BCC Parameter was discovered in MDaemon before 22.0.0 .

    OrtaCVSS 5,4İstismar yokEPSS %0

    altn · mdaemon11 May 2022

  • CVE-2022-29975
    21İzleyin

    An Authenticated Reflected Cross-site scripting at CC Parameter was discovered in MDaemon before 22.0.0 .

    OrtaCVSS 5,4İstismar yokEPSS %0

    altn · mdaemon11 May 2022

  • CVE-2012-2584
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbitrary web script or HT

    OrtaCVSS 4,3Kavram kanıtıEPSS %3

    altn · mdaemon12 Ağu 2012