İçeriğe atla
Noroxi

Exim kayıtları

Exim üreticisine ait 71 yayımlanmış kayıt. Bunların 5 tanesi sahada sömürüldü (CISA KEV listesinde), 6 tanesi için hazır saldırı aracı var.

Ürüne göre süzün ↓

Araştırmacı profili

KEV’e giren
5 · %7
Silahlaştırılmış
6 · %8,5
Pre-auth RCE
18
Düzeltme kaydı olan
%100
Yayından KEV’e ortanca
1364 gün

Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

71 kayıt
  • CVE-2019-10149
    99Hemen

    A flaw was found in Exim versions 4.87 to 4.91 (inclusive).

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    exim · exim5 Haz 2019

  • CVE-2018-6789
    94Hemen

    An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %82

    exim · exim8 Şub 2018

  • CVE-2010-4344
    91Hemen

    Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %71

    exim · exim14 Ara 2010

  • CVE-2019-16928
    81Hemen

    Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %41

    exim · exim27 Eyl 2019

  • CVE-2010-4345
    66Bu hafta

    Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate confi

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %17

    exim · exim14 Ara 2010

  • CVE-2025-26794
    62Bu hafta

    Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection.

    KritikCVSS 9,8Kavram kanıtıEPSS %77

    exim · exim21 Şub 2025

  • CVE-2020-28018
    56Planlayın

    Exim 4 before 4.94.2 allows Use After Free in smtp_reset in certain situations that may be common for builds with OpenSSL.

    KritikCVSS 9,8Kavram kanıtıEPSS %56

    exim · exim6 May 2021

  • CVE-2017-16943
    53Planlayın

    The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to execute arbitrary code or cause a

    KritikCVSS 9,8Kavram kanıtıEPSS %47

    exim · exim25 Kas 2017

  • CVE-2020-28017
    50Planlayın

    Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow in receive_add_recipient via an e-mail message with fifty million recipients

    KritikCVSS 9,8İstismar yokEPSS %36

    exim · exim6 May 2021

  • CVE-2019-15846
    50Planlayın

    Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash.

    KritikCVSS 9,8Kavram kanıtıEPSS %35

    exim · exim6 Eyl 2019

  • CVE-2017-16944
    49Planlayın

    The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to cause a denial of service (infinit

    YüksekCVSS 7,5Kavram kanıtıEPSS %63

    exim · exim25 Kas 2017

  • CVE-2020-28019
    48Planlayın

    Exim 4 before 4.94.2 has Improper Initialization that can lead to recursion-based stack consumption or other consequences.

    YüksekCVSS 7,5İstismar yokEPSS %61

    exim · exim6 May 2021

  • CVE-2023-42115
    43Planlayın

    Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    exim · exim2 May 2024

  • CVE-2020-28026
    42Planlayın

    Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters, relevant in non-default configurations that enable Delivery Status Noti

    KritikCVSS 9,8İstismar yokEPSS %9

    exim · exim6 May 2021

  • CVE-2019-13917
    42Planlayın

    Exim 4.85 through 4.92 (fixed in 4.92.1) allows remote code execution as root in some unusual configurations that use the ${sort } expansion

    KritikCVSS 9,8İstismar yokEPSS %8

    exim · exim25 Tem 2019

  • CVE-2020-28020
    41Planlayın

    Exim 4 before 4.92 allows Integer Overflow to Buffer Overflow, in which an unauthenticated remote attacker can execute arbitrary code by lev

    KritikCVSS 9,8İstismar yokEPSS %7

    exim · exim6 May 2021

  • CVE-2023-42117
    41Planlayın

    Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %6

    exim · exim2 May 2024

  • CVE-2016-1531
    40Planlayın

    Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perl_startup argument.

    YüksekCVSS 7,0SilahlaştırılmışEPSS %6

    exim · exim7 Nis 2016

  • CVE-2020-28024
    40Planlayın

    Exim 4 before 4.94.2 allows Buffer Underwrite that may result in unauthenticated remote attackers executing arbitrary commands, because smtp

    KritikCVSS 9,8İstismar yokEPSS %4

    exim · exim6 May 2021

  • CVE-2023-42116
    40Planlayın

    Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %3

    exim · exim2 May 2024

  • CVE-2022-37452
    40Planlayın

    Exim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host.c when sender_host_name is set.

    KritikCVSS 9,8İstismar yokEPSS %3

    exim · exim7 Ağu 2022

  • CVE-2020-28022
    40Planlayın

    Exim 4 before 4.94.2 has Improper Restriction of Write Operations within the Bounds of a Memory Buffer.

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    exim · exim6 May 2021

  • CVE-2026-45185
    39İzleyin

    Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path.

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    exim · exim12 May 2026

  • CVE-2022-3620
    39İzleyin

    Exim DMARC dmarc.c dmarc_dns_lookup use after free

    KritikCVSS 9,8İstismar yokEPSS %1

    exim · exim20 Eki 2022

  • CVE-2025-67896
    39İzleyin

    Exim before 4.99.1, with certain non-default rate-limit configurations, allows a remote heap-based buffer overflow because database records

    KritikCVSS 9,8İstismar yokEPSS %0

    exim · exim14 Ara 2025