İçeriğe atla
Noroxi

smartertools kayıtları

smartertools üreticisine ait 52 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
3 · %5,8
Silahlaştırılmış
4 · %7,7
Pre-auth RCE
6
Düzeltme kaydı olan
%5,8
Yayından KEV’e ortanca
13 gün

Yıllara göre kayıt

  1. 17
  2. 19
  3. 21
  4. 22
  5. 23
  6. 25
  7. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

52 kayıt
  • CVE-2026-23760
    96Hemen

    SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API

    KritikCVSS 9,3KEVSilahlaştırılmışEPSS %97

    smartertools · smartermail22 Oca 2026

  • CVE-2025-52691
    96Hemen

    Upload Arbitrary Files

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %86

    smartertools · smartermail28 Ara 2025

  • CVE-2026-24423
    93Hemen

    SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API

    KritikCVSS 9,3KEVSilahlaştırılmışEPSS %88

    smartertools · smartermail23 Oca 2026

  • CVE-2019-7214
    64Bu hafta

    SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data.

    KritikCVSS 9,8SilahlaştırılmışEPSS %85

    smartertools · smartermail24 Nis 2019

  • CVE-2011-2148
    42Planlayın

    Admin/frmSite.aspx in the SmarterTools SmarterStats 6.0 web server allows remote attackers to execute arbitrary commands via vectors involvi

    KritikCVSS 10,0İstismar yokEPSS %5

    smartertools · smarterstats20 May 2011

  • CVE-2011-2158
    41Planlayın

    The SmarterTools SmarterStats 6.0 web server sends incorrect Content-Type headers for certain resources, which might allow remote attackers

    KritikCVSS 10,0İstismar yokEPSS %4

    smartertools · smarterstats20 May 2011

  • CVE-2011-2159
    41Planlayın

    The SmarterTools SmarterStats 6.0 web server omits the Content-Type header for certain resources, which might allow remote attackers to have

    KritikCVSS 10,0İstismar yokEPSS %4

    smartertools · smarterstats20 May 2011

  • CVE-2011-4752
    41Planlayın

    SmarterTools SmarterStats 6.2.4100 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an

    KritikCVSS 10,0İstismar yokEPSS %2

    smartertools · smarterstats16 Ara 2011

  • CVE-2021-32234
    40Planlayın

    SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows remote code execution.

    KritikCVSS 9,8İstismar yokEPSS %2

    smartertools · smartermail17 Kas 2021

  • CVE-2019-7213
    38İzleyin

    SmarterTools SmarterMail 16.x before build 6985 allows directory traversal.

    OrtaCVSS 6,5Kavram kanıtıEPSS %42

    smartertools · smartermail24 Nis 2019

  • CVE-2026-7807
    34İzleyin

    SmarterTools SmarterMail < Build 9560 Server Local File Inclusion via the /api/v1/report/summary/{type} API

    YüksekCVSS 8,7İstismar yokEPSS %0

    smartertools · smartermail8 May 2026

  • CVE-2004-2583
    32İzleyin

    SMTP service in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service (CPU consumption) via a

    YüksekCVSS 7,8İstismar yokEPSS %2

    smartertools · smartermail31 Ara 2004

  • CVE-2020-29548
    32İzleyin

    An issue was discovered in SmarterTools SmarterMail through 100.0.7537.

    YüksekCVSS 8,1İstismar yokEPSS %1

    smartertools · smartermail17 Ağu 2021

  • CVE-2019-7212
    32İzleyin

    SmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys.

    YüksekCVSS 8,2İstismar yokEPSS %1

    smartertools · smartermail24 Nis 2019

  • CVE-2026-40514
    32İzleyin

    SmarterTools SmarterMail < Build 9610 Cryptographic Weakness via Weak RNG

    YüksekCVSS 8,2İstismar yokEPSS %0

    smartertools · smartermail27 Nis 2026

  • CVE-2011-2155
    31İzleyin

    Login.aspx in the SmarterTools SmarterStats 6.0 web server generates a ctl00$MPH$txtPassword password form field without disabling the autoc

    YüksekCVSS 7,5İstismar yokEPSS %4

    smartertools · smarterstats20 May 2011

  • CVE-2011-2149
    31İzleyin

    Multiple SQL injection vulnerabilities in the SmarterTools SmarterStats 6.0 web server allow remote attackers to execute arbitrary SQL comma

    YüksekCVSS 7,5İstismar yokEPSS %2

    smartertools · smarterstats20 May 2011

  • CVE-2022-24387
    29İzleyin

    File upload and overwrite to app_data/Config in SmarterTrack v100.0.8019.14010

    YüksekCVSS 7,2İstismar yokEPSS %2

    smartertools · smartertrack14 Mar 2022

  • CVE-2020-36926
    27İzleyin

    SmarterTools SmarterTrack 7922 -Information Disclosure

    OrtaCVSS 6,9İstismar yokEPSS %1

    smartertools · smartertrack15 Oca 2026

  • CVE-2026-25067
    27İzleyin

    SmarterTools SmarterMail < Build 9518 Unauthenticated background-of-the-day Path Coercion

    OrtaCVSS 6,9İstismar yokEPSS %0

    smartertools · smartermail29 Oca 2026

  • CVE-2022-24385
    26İzleyin

    Information disclosure via direct object access on SmarterTrack v100.0.8019.14010

    OrtaCVSS 6,5İstismar yokEPSS %1

    smartertools · smartertrack14 Mar 2022

  • CVE-2022-24384
    25İzleyin

    Reflective XSS on SmarterTrack v100.0.8019.14010

    OrtaCVSS 6,1Kavram kanıtıEPSS %4

    smartertools · smartertrack14 Mar 2022

  • CVE-2017-14620
    25İzleyin

    SmarterStats Version 11.3.6347 will Render the Referer Field of HTTP Logfiles from URL /Data/Reports/ReferringURLsWithQueries resulting in S

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    smartertools · smarterstats29 Eyl 2017

  • CVE-2015-9276
    24İzleyin

    SmarterTools SmarterMail before 13.3.5535 was vulnerable to stored XSS by bypassing the anti-XSS mechanisms.

    OrtaCVSS 6,1İstismar yokEPSS %1

    smartertools · smartermail16 Oca 2019

  • CVE-2022-24386
    24İzleyin

    Stored XSS in SmarterTrack v100.0.8019.14010

    OrtaCVSS 6,1İstismar yokEPSS %1

    smartertools · smartertrack14 Mar 2022