MailCleaner kayıtları
mailcleaner üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %10
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-862 Missing Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
51Planlayın | CVE-2018-20323Silahlaştırılmış | www/soap/application/MCSoap/Logs.php in MailCleaner Community Edition 2018.08 allows remote attackers to execute arbitrary OS commands.mailcleaner · mailcleaner · CWE-78 | Yüksek8,8 | — | %54,5 | 21 Mar 2019 |
41Planlayın | CVE-2024-3191İstismar yok | MailCleaner Email os command injectionmailcleaner · mailcleaner · CWE-78 | Kritik9,8 | — | %5,2 | 29 Nis 2024 |
39İzleyin | CVE-2024-55560İstismar yok | MailCleaner before 28d913e has default values of ssh_host_dsa_key, ssh_host_rsa_key, and ssh_host_ed25519_key that persist after installatio | Kritik9,8 | — | %0,6 | 8 Ara 2024 |
38İzleyin | CVE-2024-3192İstismar yok | MailCleaner Admin Interface cross site scriptingmailcleaner · mailcleaner · CWE-79 | Kritik9,6 | — | %1,0 | 29 Nis 2024 |
36İzleyin | CVE-2024-3193İstismar yok | MailCleaner Admin Endpoints os command injectionmailcleaner · mailcleaner · CWE-78 | Yüksek8,8 | — | %4,2 | 29 Nis 2024 |
30İzleyin | CVE-2019-1010246İstismar yok | MailCleaner before c888fbb6aaa7c5f8400f637bcf1cbb844de46cd9 is affected by: Unauthenticated MySQL database password information disclosure.mailcleaner · mailcleaner · CWE-862 | Yüksek7,5 | — | %1,4 | 18 Tem 2019 |
28İzleyin | CVE-2024-3195İstismar yok | MailCleaner Admin Endpoints path traversalmailcleaner · mailcleaner · CWE-22 | Yüksek7,2 | — | %1,0 | 29 Nis 2024 |
26İzleyin | CVE-2024-3196İstismar yok | MailCleaner SOAP Service dumpConfiguration os command injectionmailcleaner · mailcleaner · CWE-78 | Orta6,7 | — | %1,7 | 29 Nis 2024 |
24İzleyin | CVE-2018-18635İstismar yok | www/guis/admin/application/controllers/UserController.php in the administration login interface in MailCleaner CE 2018.08 and 2018.09 allowsmailcleaner · mailcleaner · CWE-79 | Orta6,1 | — | %0,9 | 24 Eki 2018 |
24İzleyin | CVE-2024-3194İstismar yok | MailCleaner Log File Endpoint cross site scriptingmailcleaner · mailcleaner · CWE-79 | Orta6,1 | — | %0,7 | 29 Nis 2024 |
- CVE-2018-2032351Planlayın
www/soap/application/MCSoap/Logs.php in MailCleaner Community Edition 2018.08 allows remote attackers to execute arbitrary OS commands.
YüksekCVSS 8,8SilahlaştırılmışEPSS %54mailcleaner · mailcleaner21 Mar 2019
- CVE-2024-319141Planlayın
MailCleaner Email os command injection
KritikCVSS 9,8İstismar yokEPSS %5mailcleaner · mailcleaner29 Nis 2024
- CVE-2024-5556039İzleyin
MailCleaner before 28d913e has default values of ssh_host_dsa_key, ssh_host_rsa_key, and ssh_host_ed25519_key that persist after installatio
KritikCVSS 9,8İstismar yokEPSS %18 Ara 2024
- CVE-2024-319238İzleyin
MailCleaner Admin Interface cross site scripting
KritikCVSS 9,6İstismar yokEPSS %1mailcleaner · mailcleaner29 Nis 2024
- CVE-2024-319336İzleyin
MailCleaner Admin Endpoints os command injection
YüksekCVSS 8,8İstismar yokEPSS %4mailcleaner · mailcleaner29 Nis 2024
- CVE-2019-101024630İzleyin
MailCleaner before c888fbb6aaa7c5f8400f637bcf1cbb844de46cd9 is affected by: Unauthenticated MySQL database password information disclosure.
YüksekCVSS 7,5İstismar yokEPSS %1mailcleaner · mailcleaner18 Tem 2019
- CVE-2024-319528İzleyin
MailCleaner Admin Endpoints path traversal
YüksekCVSS 7,2İstismar yokEPSS %1mailcleaner · mailcleaner29 Nis 2024
- CVE-2024-319626İzleyin
MailCleaner SOAP Service dumpConfiguration os command injection
OrtaCVSS 6,7İstismar yokEPSS %2mailcleaner · mailcleaner29 Nis 2024
- CVE-2018-1863524İzleyin
www/guis/admin/application/controllers/UserController.php in the administration login interface in MailCleaner CE 2018.08 and 2018.09 allows
OrtaCVSS 6,1İstismar yokEPSS %1mailcleaner · mailcleaner24 Eki 2018
- CVE-2024-319424İzleyin
MailCleaner Log File Endpoint cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %1mailcleaner · mailcleaner29 Nis 2024