neosys kayıtları
neosys üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Saldırı profili
Tüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
32İzleyin | CVE-2006-4952Kavram kanıtı | The updatemail servlet in Neon WebMail for Java before 5.08 allows remote attackers to move e-mail messages of arbitrary users between diffeneosys · neon webmail | Yüksek7,5 | — | %8,1 | 23 Eyl 2006 |
32İzleyin | CVE-2006-4954Kavram kanıtı | The updateuser servlet in Neon WebMail for Java before 5.08 does not validate the in_id parameter, which allows remote attackers to modify ineosys · neon webmail | Yüksek7,5 | — | %8,1 | 23 Eyl 2006 |
31İzleyin | CVE-2006-4953Kavram kanıtı | Multiple SQL injection vulnerabilities in Neon WebMail for Java before 5.08 allow remote attackers to execute arbitrary SQL commands via theneosys · neon webmail | Yüksek7,5 | — | %3,8 | 23 Eyl 2006 |
31İzleyin | CVE-2006-4951İstismar yok | Neon WebMail for Java before 5.08 allows remote attackers to execute arbitrary Java (JSP) code by sending an e-mail message with a JSP file neosys · neon webmail | Yüksek7,5 | — | %2,6 | 23 Eyl 2006 |
28İzleyin | CVE-2006-4956Kavram kanıtı | Cross-site scripting (XSS) vulnerability in the updateuser servlet in Neon WebMail for Java before 5.08 allows remote attackers to inject arneosys · neon webmail | Orta6,8 | — | %4,8 | 23 Eyl 2006 |
22İzleyin | CVE-2006-4955Kavram kanıtı | Directory traversal vulnerability in the downloadfile servlet in Neon WebMail for Java before 5.08 allows remote attackers to read arbitraryneosys · neon webmail | Orta5,0 | — | %8,2 | 23 Eyl 2006 |
- CVE-2006-495232İzleyin
The updatemail servlet in Neon WebMail for Java before 5.08 allows remote attackers to move e-mail messages of arbitrary users between diffe
YüksekCVSS 7,5Kavram kanıtıEPSS %8neosys · neon webmail23 Eyl 2006
- CVE-2006-495432İzleyin
The updateuser servlet in Neon WebMail for Java before 5.08 does not validate the in_id parameter, which allows remote attackers to modify i
YüksekCVSS 7,5Kavram kanıtıEPSS %8neosys · neon webmail23 Eyl 2006
- CVE-2006-495331İzleyin
Multiple SQL injection vulnerabilities in Neon WebMail for Java before 5.08 allow remote attackers to execute arbitrary SQL commands via the
YüksekCVSS 7,5Kavram kanıtıEPSS %3neosys · neon webmail23 Eyl 2006
- CVE-2006-495131İzleyin
Neon WebMail for Java before 5.08 allows remote attackers to execute arbitrary Java (JSP) code by sending an e-mail message with a JSP file
YüksekCVSS 7,5İstismar yokEPSS %2neosys · neon webmail23 Eyl 2006
- CVE-2006-495628İzleyin
Cross-site scripting (XSS) vulnerability in the updateuser servlet in Neon WebMail for Java before 5.08 allows remote attackers to inject ar
OrtaCVSS 6,8Kavram kanıtıEPSS %4neosys · neon webmail23 Eyl 2006
- CVE-2006-495522İzleyin
Directory traversal vulnerability in the downloadfile servlet in Neon WebMail for Java before 5.08 allows remote attackers to read arbitrary
OrtaCVSS 5,0Kavram kanıtıEPSS %8neosys · neon webmail23 Eyl 2006