İçeriğe atla
Noroxi

NetWin kayıtları

netwin üreticisine ait 50 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
11
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

50 kayıt
  • CVE-2000-0490
    42Planlayın

    Buffer overflow in the NetWin DSMTP 2.7q in the NetWin dmail package allows remote attackers to execute arbitrary commands via a long ETRN r

    KritikCVSS 10,0Kavram kanıtıEPSS %6

    netwin · dmail1 Haz 2000

  • CVE-2001-1356
    41Planlayın

    NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and modulo 40 calculations, which allows remote a

    KritikCVSS 10,0İstismar yokEPSS %4

    netwin · surgeftp4 Ağu 2001

  • CVE-2001-1355
    41Planlayın

    Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages,

    KritikCVSS 10,0İstismar yokEPSS %4

    netwin · dmail20 Tem 2001

  • CVE-2004-2537
    41Planlayın

    Unspecified vulnerability in SurgeMail before 2.2c10 has unknown impact and attack vectors, related to a "Webmail security bug."

    KritikCVSS 10,0İstismar yokEPSS %2

    netwin · surgemail31 Ara 2004

  • CVE-2007-4372
    40Planlayın

    Unspecified vulnerability in NetWin SurgeMail 38k on Windows Server 2003 has unknown impact and remote attack vectors.

    KritikCVSS 10,0İstismar yokEPSS %1

    netwin · surgemail16 Ağu 2007

  • CVE-2008-1498
    38İzleyin

    Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated users to execute arbitra

    KritikCVSS 9,0Kavram kanıtıEPSS %8

    netwin · surgemail25 Mar 2008

  • CVE-2008-1497
    38İzleyin

    Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrar

    KritikCVSS 9,0İstismar yokEPSS %6

    netwin · surgemail25 Mar 2008

  • CVE-2007-3768
    34İzleyin

    The mirror mechanism in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to cause a denial of service (restart) via a malformed respo

    YüksekCVSS 8,5İstismar yokEPSS %2

    netwin · surgeftp15 Tem 2007

  • CVE-2004-2254
    33İzleyin

    SurgeLDAP 1.0g (Build 12), and possibly other versions before 1.0h, allows remote attackers to bypass authentication for the administration

    YüksekCVSS 7,5Kavram kanıtıEPSS %8

    netwin · surgeldap31 Ara 2004

  • CVE-2008-1055
    32İzleyin

    Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earlier, allows remote at

    YüksekCVSS 7,5Kavram kanıtıEPSS %8

    netwin · surgemail27 Şub 2008

  • CVE-2005-1478
    31İzleyin

    Format string vulnerability in dSMTP (dsmtp.exe) in DMail 3.1a allows remote attackers to execute arbitrary code via format string specifier

    YüksekCVSS 7,5İstismar yokEPSS %5

    netwin · dmail11 May 2005

  • CVE-2013-4742
    31İzleyin

    Buffer overflow in NetWin SurgeFTP before 23d2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary co

    YüksekCVSS 7,5İstismar yokEPSS %4

    netwin · surgeftp9 Ağu 2013

  • CVE-2007-2655
    31İzleyin

    Unspecified vulnerability in NetWin Webmail 3.1s-1 in SurgeMail before 3.8i2 has unknown impact and remote attack vectors, possibly a format

    YüksekCVSS 7,5İstismar yokEPSS %4

    netwin · surgemail14 May 2007

  • CVE-2006-5100
    31İzleyin

    PHP remote file inclusion vulnerability in parse/parser.php in WEB//NEWS (aka webnews) 1.4 and earlier allows remote attackers to execute ar

    YüksekCVSS 7,5Kavram kanıtıEPSS %4

    netwin · webnews3 Eki 2006

  • CVE-2002-0290
    31İzleyin

    Buffer overflow in Netwin WebNews CGI program 1.1, Webnews.exe, allows remote attackers to execute arbitrary code via a long group argument.

    YüksekCVSS 7,5İstismar yokEPSS %3

    netwin · webnews31 May 2002

  • CVE-2000-0422
    31İzleyin

    Buffer overflow in Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken parameter.

    YüksekCVSS 7,5İstismar yokEPSS %2

    netwin · dmail4 May 2000

  • CVE-2005-1516
    30İzleyin

    DList (dlist.exe) in DMail 3.1a allows remote attackers to bypass authentication, read log files, and shutdown the system via a sendlog comm

    YüksekCVSS 7,5İstismar yokEPSS %2

    netwin · dmail11 May 2005

  • CVE-2002-0310
    30İzleyin

    Netwin WebNews 1.1k CGI program includes several default usernames and cleartext passwords that cannot be deleted by the administrator, whic

    YüksekCVSS 7,5İstismar yokEPSS %2

    netwin · webnews31 May 2002

  • CVE-2008-1054
    27İzleyin

    Stack-based buffer overflow in the _lib_spawn_user_getpid function in (1) swatch.exe and (2) surgemail.exe in NetWin SurgeMail 38k4 and earl

    OrtaCVSS 6,4Kavram kanıtıEPSS %7

    netwin · surgemail27 Şub 2008

  • CVE-2008-1052
    27İzleyin

    The administration web interface in NetWin SurgeFTP 2.3a2 and earlier allows remote attackers to cause a denial of service (daemon crash) vi

    OrtaCVSS 6,4Kavram kanıtıEPSS %7

    netwin · surgeftp27 Şub 2008

  • CVE-2007-4377
    26İzleyin

    Stack-based buffer overflow in the IMAP service in SurgeMail 38k allows remote authenticated users to execute arbitrary code via a long argu

    OrtaCVSS 6,0Kavram kanıtıEPSS %5

    netwin · surgemail16 Ağu 2007

  • CVE-2017-17933
    24İzleyin

    cgi/surgeftpmgr.cgi (aka the Web Manager interface on TCP port 7021 or 9021) in NetWin SurgeFTP version 23f2 has XSS via the classid, domain

    OrtaCVSS 6,1İstismar yokEPSS %1

    netwin · surgeftp29 Ara 2017

  • CVE-2008-7182
    23İzleyin

    Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote authenticated users to

    OrtaCVSS 4,0Kavram kanıtıEPSS %24

    netwin · surgemail8 Eyl 2009

  • CVE-2007-3769
    23İzleyin

    Cross-site scripting (XSS) vulnerability in the mirrored server management interface in SurgeFTP 2.3a1 allows user-assisted, remote FTP serv

    OrtaCVSS 5,8İstismar yokEPSS %1

    netwin · surgeftp15 Tem 2007

  • CVE-2000-0423
    22İzleyin

    Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd,

    OrtaCVSS 5,0Kavram kanıtıEPSS %8

    netwin · dnews5 May 2000