kerio kayıtları
kerio üreticisine ait 44 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %2,3
- Pre-auth RCE
- 4
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-20 Improper Input Validation1
- CWE-287 Improper Authentication1
- CWE-16 Configuration1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
44 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
51Planlayın | CVE-2003-0220Silahlaştırılmış | Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to ekerio · personal firewall 2 | Yüksek7,5 | — | %69,1 | 12 May 2003 |
41Planlayın | CVE-2007-3993İstismar yok | Unspecified vulnerability in the attachment filter in Kerio MailServer before 6.4.1 has unknown impact and remote attack vectors.kerio · kerio mailserver | Kritik10,0 | — | %1,8 | 25 Tem 2007 |
41Planlayın | CVE-2004-2441İstismar yok | Unspecified vulnerability in Kerio MailServer before 6.0.3 has unknown impact and unknown remote attack vectors, related to a "potential seckerio · kerio mailserver | Kritik10,0 | — | %1,7 | 31 Ara 2004 |
40Planlayın | CVE-2008-0860İstismar yok | Unspecified vulnerability in the AVG plugin in Kerio MailServer before 6.5.0 has unspecified impact via unknown remote attack vectors relatekerio · avg plugin | Kritik10,0 | — | %1,5 | 20 Şub 2008 |
33İzleyin | CVE-2003-0487Kavram kanıtı | Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and possibly execute arbitkerio · kerio mailserver | Yüksek7,5 | — | %11,4 | 7 Ağu 2003 |
32İzleyin | CVE-2006-1158İstismar yok | Kerio MailServer before 6.1.3 Patch 1 allows remote attackers to cause a denial of service (application crash) via a crafted IMAP LOGIN commkerio · kerio mailserver | Yüksek7,8 | — | %2,1 | 12 Mar 2006 |
32İzleyin | CVE-2005-4425İstismar yok | Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to cause a denial of service (crash) via certain Rkerio · winroute firewall | Yüksek7,8 | — | %1,8 | 20 Ara 2005 |
31İzleyin | CVE-2008-0858İstismar yok | Buffer overflow in the Visnetic anti-virus plugin in Kerio MailServer before 6.5.0 might allow remote attackers to execute arbitrary code vikerio · kerio mailserver · CWE-94 | Yüksek7,5 | — | %4,0 | 20 Şub 2008 |
31İzleyin | CVE-2003-0219İstismar yok | Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute administrator commands by sniffing packets from a valid skerio · personal firewall 2 | Yüksek7,5 | — | %3,8 | 12 May 2003 |
31İzleyin | CVE-2005-1062İstismar yok | The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allokerio · kerio mailserver | Yüksek7,5 | — | %2,6 | 2 May 2005 |
31İzleyin | CVE-2003-1491İstismar yok | Kerio Personal Firewall (KPF) 2.1.4 has a default rule to accept incoming packets from DNS (UDP port 53), which allows remote attackers to bkerio · personal firewall · CWE-16 | Yüksek7,5 | — | %2,4 | 31 Ara 2003 |
31İzleyin | CVE-2005-4157İstismar yok | Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to authenticate to the service using an account thkerio · winroute firewall | Yüksek7,5 | — | %1,7 | 10 Ara 2005 |
28İzleyin | CVE-2002-1434Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in the Web mail module of Kerio MailServer 5.0 allow remote attackers to execute HTML sckerio · kerio mailserver | Orta6,8 | — | %4,3 | 11 Nis 2003 |
28İzleyin | CVE-2011-1506İstismar yok | The STARTTLS implementation in Kerio Connect 7.1.4 build 2985 and MailServer 6.x does not properly restrict I/O buffering, which allows man-kerio · connect · CWE-20 | Orta6,8 | — | %2,5 | 22 Mar 2011 |
28İzleyin | CVE-2004-2329İstismar yok | Kerio Personal Firewall (KPF) 2.1.5 allows local users to execute arbitrary code with SYSTEM privileges via the Load button in the Firewall kerio · personal firewall | Yüksek7,2 | — | %0,6 | 31 Ara 2004 |
27İzleyin | CVE-2014-3857Kavram kanıtı | Multiple SQL injection vulnerabilities in Kerio Control Statistics in Kerio Control (formerly WinRoute Firewall) before 8.3.2 allow remote akerio · control · CWE-89 | Orta6,5 | — | %2,2 | 3 Tem 2014 |
26İzleyin | CVE-2004-2483İstismar yok | Kerio WinRoute Firewall before 6.0.9 uses information from PTR queries in response to A queries, which allows remote attackers to poison thekerio · winroute firewall | Orta6,4 | — | %1,7 | 31 Ara 2004 |
25İzleyin | CVE-2006-2203İstismar yok | Unspecified vulnerability in Kerio MailServer before 6.1.4 has unknown impact and remote attack vectors related to a "possible bypass of attkerio · kerio mailserver | Orta6,4 | — | %1,2 | 5 May 2006 |
24İzleyin | CVE-2006-6131Kavram kanıtı | Untrusted search path vulnerability in (1) WSAdminServer and (2) WSWebServer in Kerio WebSTAR (4D WebSTAR Server Suite) 5.4.2 and earlier alkerio · webstar | Orta6,2 | — | %0,9 | 27 Kas 2006 |
22İzleyin | CVE-2003-0488Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer 5.6.3 allow remote attackers to insert arbitrary web script via (1) kerio · kerio mailserver | Orta5,1 | — | %6,8 | 7 Ağu 2003 |
21İzleyin | CVE-2004-1109Kavram kanıtı | The FWDRV.SYS driver in Kerio Personal Firewall 4.1.1 and earlier allows remote attackers to cause a denial of service (CPU consumption and kerio · personal firewall | Orta5,0 | — | %3,2 | 10 Oca 2005 |
21İzleyin | CVE-2006-2267İstismar yok | Kerio WinRoute Firewall before 6.2.1 allows remote attackers to cause a denial of service (application crash) via unknown vectors in the "emkerio · winroute firewall | Orta5,0 | — | %3,2 | 9 May 2006 |
21İzleyin | CVE-2006-0335İstismar yok | Multiple unspecified vulnerabilities in Kerio WinRoute Firewall before 6.1.4 Patch 1 allow remote attackers to cause a denial of service viakerio · winroute firewall | Orta5,0 | — | %2,7 | 20 Oca 2006 |
21İzleyin | CVE-2006-5420İstismar yok | Kerio WinRoute Firewall 6.2.2 and earlier allows remote attackers to cause a denial of service (crash) via malformed DNS responses.kerio · winroute firewall | Orta5,0 | — | %2,6 | 20 Eki 2006 |
21İzleyin | CVE-2006-0336İstismar yok | Kerio WinRoute Firewall before 6.1.4 Patch 2 allows attackers to cause a denial of service (CPU consumption and hang) via unknown vectors inkerio · winroute firewall | Orta5,0 | — | %2,0 | 20 Oca 2006 |
- CVE-2003-022051Planlayın
Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to e
YüksekCVSS 7,5SilahlaştırılmışEPSS %69kerio · personal firewall 212 May 2003
- CVE-2007-399341Planlayın
Unspecified vulnerability in the attachment filter in Kerio MailServer before 6.4.1 has unknown impact and remote attack vectors.
KritikCVSS 10,0İstismar yokEPSS %2kerio · kerio mailserver25 Tem 2007
- CVE-2004-244141Planlayın
Unspecified vulnerability in Kerio MailServer before 6.0.3 has unknown impact and unknown remote attack vectors, related to a "potential sec
KritikCVSS 10,0İstismar yokEPSS %2kerio · kerio mailserver31 Ara 2004
- CVE-2008-086040Planlayın
Unspecified vulnerability in the AVG plugin in Kerio MailServer before 6.5.0 has unspecified impact via unknown remote attack vectors relate
KritikCVSS 10,0İstismar yokEPSS %2kerio · avg plugin20 Şub 2008
- CVE-2003-048733İzleyin
Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and possibly execute arbit
YüksekCVSS 7,5Kavram kanıtıEPSS %11kerio · kerio mailserver7 Ağu 2003
- CVE-2006-115832İzleyin
Kerio MailServer before 6.1.3 Patch 1 allows remote attackers to cause a denial of service (application crash) via a crafted IMAP LOGIN comm
YüksekCVSS 7,8İstismar yokEPSS %2kerio · kerio mailserver12 Mar 2006
- CVE-2005-442532İzleyin
Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to cause a denial of service (crash) via certain R
YüksekCVSS 7,8İstismar yokEPSS %2kerio · winroute firewall20 Ara 2005
- CVE-2008-085831İzleyin
Buffer overflow in the Visnetic anti-virus plugin in Kerio MailServer before 6.5.0 might allow remote attackers to execute arbitrary code vi
YüksekCVSS 7,5İstismar yokEPSS %4kerio · kerio mailserver20 Şub 2008
- CVE-2003-021931İzleyin
Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute administrator commands by sniffing packets from a valid s
YüksekCVSS 7,5İstismar yokEPSS %4kerio · personal firewall 212 May 2003
- CVE-2005-106231İzleyin
The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allo
YüksekCVSS 7,5İstismar yokEPSS %3kerio · kerio mailserver2 May 2005
- CVE-2003-149131İzleyin
Kerio Personal Firewall (KPF) 2.1.4 has a default rule to accept incoming packets from DNS (UDP port 53), which allows remote attackers to b
YüksekCVSS 7,5İstismar yokEPSS %2kerio · personal firewall31 Ara 2003
- CVE-2005-415731İzleyin
Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to authenticate to the service using an account th
YüksekCVSS 7,5İstismar yokEPSS %2kerio · winroute firewall10 Ara 2005
- CVE-2002-143428İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in the Web mail module of Kerio MailServer 5.0 allow remote attackers to execute HTML sc
OrtaCVSS 6,8Kavram kanıtıEPSS %4kerio · kerio mailserver11 Nis 2003
- CVE-2011-150628İzleyin
The STARTTLS implementation in Kerio Connect 7.1.4 build 2985 and MailServer 6.x does not properly restrict I/O buffering, which allows man-
OrtaCVSS 6,8İstismar yokEPSS %2kerio · connect22 Mar 2011
- CVE-2004-232928İzleyin
Kerio Personal Firewall (KPF) 2.1.5 allows local users to execute arbitrary code with SYSTEM privileges via the Load button in the Firewall
YüksekCVSS 7,2İstismar yokEPSS %1kerio · personal firewall31 Ara 2004
- CVE-2014-385727İzleyin
Multiple SQL injection vulnerabilities in Kerio Control Statistics in Kerio Control (formerly WinRoute Firewall) before 8.3.2 allow remote a
OrtaCVSS 6,5Kavram kanıtıEPSS %2kerio · control3 Tem 2014
- CVE-2004-248326İzleyin
Kerio WinRoute Firewall before 6.0.9 uses information from PTR queries in response to A queries, which allows remote attackers to poison the
OrtaCVSS 6,4İstismar yokEPSS %2kerio · winroute firewall31 Ara 2004
- CVE-2006-220325İzleyin
Unspecified vulnerability in Kerio MailServer before 6.1.4 has unknown impact and remote attack vectors related to a "possible bypass of att
OrtaCVSS 6,4İstismar yokEPSS %1kerio · kerio mailserver5 May 2006
- CVE-2006-613124İzleyin
Untrusted search path vulnerability in (1) WSAdminServer and (2) WSWebServer in Kerio WebSTAR (4D WebSTAR Server Suite) 5.4.2 and earlier al
OrtaCVSS 6,2Kavram kanıtıEPSS %1kerio · webstar27 Kas 2006
- CVE-2003-048822İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer 5.6.3 allow remote attackers to insert arbitrary web script via (1)
OrtaCVSS 5,1Kavram kanıtıEPSS %7kerio · kerio mailserver7 Ağu 2003
- CVE-2004-110921İzleyin
The FWDRV.SYS driver in Kerio Personal Firewall 4.1.1 and earlier allows remote attackers to cause a denial of service (CPU consumption and
OrtaCVSS 5,0Kavram kanıtıEPSS %3kerio · personal firewall10 Oca 2005
- CVE-2006-226721İzleyin
Kerio WinRoute Firewall before 6.2.1 allows remote attackers to cause a denial of service (application crash) via unknown vectors in the "em
OrtaCVSS 5,0İstismar yokEPSS %3kerio · winroute firewall9 May 2006
- CVE-2006-033521İzleyin
Multiple unspecified vulnerabilities in Kerio WinRoute Firewall before 6.1.4 Patch 1 allow remote attackers to cause a denial of service via
OrtaCVSS 5,0İstismar yokEPSS %3kerio · winroute firewall20 Oca 2006
- CVE-2006-542021İzleyin
Kerio WinRoute Firewall 6.2.2 and earlier allows remote attackers to cause a denial of service (crash) via malformed DNS responses.
OrtaCVSS 5,0İstismar yokEPSS %3kerio · winroute firewall20 Eki 2006
- CVE-2006-033621İzleyin
Kerio WinRoute Firewall before 6.1.4 Patch 2 allows attackers to cause a denial of service (CPU consumption and hang) via unknown vectors in
OrtaCVSS 5,0İstismar yokEPSS %2kerio · winroute firewall20 Oca 2006