İçeriğe atla
Noroxi

sympa kayıtları

sympa üreticisine ait 13 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%100
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 20
  3. 23

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

13 kayıt
  • CVE-2018-1000550
    40Planlayın

    The Sympa Community Sympa version prior to version 6.2.32 contains a Directory Traversal vulnerability in wwsympa.fcgi template editing func

    KritikCVSS 9,8İstismar yokEPSS %2

    sympa · sympa26 Haz 2018

  • CVE-2012-2352
    31İzleyin

    The archive management (arc_manage) page in wwsympa/wwsympa.fcgi.in in Sympa before 6.1.11 does not check permissions, which allows remote a

    YüksekCVSS 7,5İstismar yokEPSS %3

    sympa · sympa31 May 2012

  • CVE-2020-9369
    31İzleyin

    Sympa 6.2.38 through 6.2.52 allows remote attackers to cause a denial of service (disk consumption from temporary files, and a flood of noti

    YüksekCVSS 7,5İstismar yokEPSS %2

    sympa · sympa24 Şub 2020

  • CVE-2020-10936
    31İzleyin

    Sympa before 6.2.56 allows privilege escalation.

    YüksekCVSS 7,8İstismar yokEPSS %0

    sympa · sympa27 May 2020

  • CVE-2020-26880
    31İzleyin

    Sympa through 6.2.57b.2 allows a local privilege escalation from the sympa user account to full root access by modifying the sympa.conf conf

    YüksekCVSS 7,8İstismar yokEPSS %0

    sympa · sympa7 Eki 2020

  • CVE-2021-46900
    30İzleyin

    Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not ensure that this parameter exists and has an

    YüksekCVSS 7,5İstismar yokEPSS %0

    sympa · sympa31 Ara 2023

  • CVE-2008-4476
    27İzleyin

    sympa.pl in sympa 5.3.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sympa_aliases.$$ temporary file.

    OrtaCVSS 6,9İstismar yokEPSS %0

    sympa · sympa7 Eki 2008

  • CVE-2018-1000671
    25İzleyin

    sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in The "referer" parame

    OrtaCVSS 6,1Kavram kanıtıEPSS %3

    sympa · sympa6 Eyl 2018

  • CVE-2015-1306
    21İzleyin

    The newsletter posting area in the web interface in Sympa 6.0.x before 6.0.10 and 6.1.x before 6.1.24 allows remote attackers to read arbitr

    OrtaCVSS 5,0İstismar yokEPSS %2

    sympa · sympa22 Oca 2015

  • CVE-2008-1648
    21İzleyin

    Sympa before 5.4 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message with a malformed value of the Con

    OrtaCVSS 5,0İstismar yokEPSS %2

    sympa · sympa2 Nis 2008

  • CVE-2004-1735
    18İzleyin

    Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier allows remote authenticated users to inject ar

    OrtaCVSS 4,3Kavram kanıtıEPSS %2

    sympa · sympa21 Ağu 2004

  • CVE-2020-26932
    17İzleyin

    debian/sympa.postinst for the Debian Sympa package before 6.2.40~dfsg-7 uses mode 4755 for sympa_newaliases-wrapper, whereas the intended pe

    OrtaCVSS 4,3İstismar yokEPSS %0

    sympa · sympa10 Eki 2020

  • CVE-2020-29668
    15İzleyin

    Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string (except one from an expired co

    DüşükCVSS 3,7İstismar yokEPSS %1

    sympa · sympa10 Ara 2020