İçeriğe atla
Noroxi

merak kayıtları

merak üreticisine ait 25 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

    Çubuk: toplam · koyu kısım: CISA KEV.

    Tekrar eden sınıflar

    Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

    CWE

    Saldırı profili

    Tüm kayıtlar

    25 kayıt
    • CVE-2009-0350
      40Planlayın

      Stack-based buffer overflow in Merak Media Player 3.2 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist

      KritikCVSS 9,3Kavram kanıtıEPSS %10

      merak · media player29 Oca 2009

    • CVE-2005-4556
      33İzleyin

      PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0

      YüksekCVSS 7,5Kavram kanıtıEPSS %11

      icewarp · web mail28 Ara 2005

    • CVE-2004-1722
      31İzleyin

      SQL injection vulnerability in calendar.html in Merak Mail Server 5.2.7 allows remote attackers to execute arbitrary SQL statements via the

      YüksekCVSS 7,5Kavram kanıtıEPSS %3

      merak · mail server17 Ağu 2004

    • CVE-2004-1670
      31İzleyin

      Multiple directory traversal vulnerabilities Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7, and possibly other versions, allow remote

      YüksekCVSS 7,5İstismar yokEPSS %2

      icewarp · web mail10 Eyl 2004

    • CVE-2004-1674
      30İzleyin

      viewaction.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to (1) delete arb

      YüksekCVSS 7,5İstismar yokEPSS %2

      icewarp · web mail12 Eki 2004

    • CVE-2002-0258
      30İzleyin

      Merak Mail IceWarp Web Mail uses a static identifier as a user session ID that does not change across sessions, which could allow remote att

      YüksekCVSS 7,5İstismar yokEPSS %1

      icewarp · web mail29 May 2002

    • CVE-2005-4558
      29İzleyin

      IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly restrict accep

      OrtaCVSS 6,5Kavram kanıtıEPSS %8

      icewarp · web mail28 Ara 2005

    • CVE-2005-0322
      28İzleyin

      MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak encryption in the (1) us

      YüksekCVSS 7,2İstismar yokEPSS %0

      icewarp · web mail2 May 2005

    • CVE-2005-4557
      23İzleyin

      dir/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, allows remot

      OrtaCVSS 5,0Kavram kanıtıEPSS %9

      icewarp · web mail28 Ara 2005

    • CVE-2005-4559
      23İzleyin

      mail/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not pr

      OrtaCVSS 5,0Kavram kanıtıEPSS %9

      icewarp · web mail28 Ara 2005

    • CVE-2004-1720
      22İzleyin

      The (1) address.html and possibly (2) calendar.html pages in Merak Mail Server 5.2.7 allow remote attackers to gain sensitive information vi

      OrtaCVSS 5,0Kavram kanıtıEPSS %8

      merak · mail server17 Ağu 2004

    • CVE-2005-3133
      22İzleyin

      Multiple directory traversal vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows

      OrtaCVSS 5,0Kavram kanıtıEPSS %6

      icewarp · web mail4 Eki 2005

    • CVE-2006-0817
      22İzleyin

      Absolute path directory traversal vulnerability in (a) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (b) VisNe

      OrtaCVSS 5,0İstismar yokEPSS %6

      icewarp · web mail21 Tem 2006

    • CVE-2004-1721
      21İzleyin

      The (1) function.php or (2) function.view.php scripts in Merak Mail Server 5.2.7 allow remote attackers to read arbitrary PHP files via a di

      OrtaCVSS 5,0İstismar yokEPSS %2

      merak · mail server17 Ağu 2004

    • CVE-2005-3132
      20İzleyin

      MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to obtain sensitive information

      OrtaCVSS 5,0İstismar yokEPSS %1

      icewarp · web mail4 Eki 2005

    • CVE-2005-1489
      20İzleyin

      Unknown vulnerability in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to obtain the full path of th

      OrtaCVSS 5,0İstismar yokEPSS %1

      icewarp · web mail11 May 2005

    • CVE-2004-1719
      19İzleyin

      Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbitrary web script or H

      OrtaCVSS 4,3Kavram kanıtıEPSS %5

      merak · mail server17 Ağu 2004

    • CVE-2005-3131
      18İzleyin

      Multiple cross-site scripting (XSS) vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions,

      OrtaCVSS 4,3Kavram kanıtıEPSS %4

      icewarp · web mail4 Eki 2005

    • CVE-2008-0218
      18İzleyin

      Cross-site scripting (XSS) vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to inject arbitrary web sc

      OrtaCVSS 4,3Kavram kanıtıEPSS %3

      merak · icewarp mail server10 Oca 2008

    • CVE-2005-1491
      18İzleyin

      Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to (1) move their home directory via viewaction.html o

      OrtaCVSS 4,6İstismar yokEPSS %1

      icewarp · web mail11 May 2005

    • CVE-2006-0818
      17İzleyin

      Absolute path directory traversal vulnerability in (1) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (2) VisNe

      OrtaCVSS 4,0İstismar yokEPSS %2

      icewarp · web mail21 Tem 2006

    • CVE-2004-1669
      17İzleyin

      Cross-site scripting (XSS) vulnerability in MERAK Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote at

      OrtaCVSS 4,3İstismar yokEPSS %1

      icewarp · web mail10 Eyl 2004

    • CVE-2005-0321
      8İzleyin

      MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allows remote authenticated users to gain sensitive information via an HTTP request to (

      DüşükCVSS 2,1İstismar yokEPSS %1

      icewarp · web mail2 May 2005

    • CVE-2005-1490
      8İzleyin

      Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2, when the mailbox.dat file does not exist, allows remote authenticated users to determin

      DüşükCVSS 2,1İstismar yokEPSS %1

      icewarp · web mail11 May 2005

    • CVE-2005-1488
      7İzleyin

      Multiple cross-site scripting (XSS) vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allow remote authenticated users

      DüşükCVSS 1,9İstismar yokEPSS %0

      icewarp · web mail11 May 2005