Altn
Altn Mdaemon: vulnerabilidades y CVE
Altn Mdaemon tiene 11 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE11
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-29976 | Media (5.4) | 0.49% | — | 11 may 2022 | An Authenticated Reflected Cross-site scripting at BCC Parameter was discovered in MDaemon before 22.0.0 . |
| CVE-2022-29975 | Media (5.4) | 0.49% | — | 11 may 2022 | An Authenticated Reflected Cross-site scripting at CC Parameter was discovered in MDaemon before 22.0.0 . |
| CVE-2021-27183 | Alta (7.2) | 2.7% | — | 14 abr 2021 | An issue was discovered in MDaemon before 20.0.4. Administrators can use Remote Administration to exploit an Arbitrary File Write vulnerability. An attacker is able to create new files in any location of the filesystem,… |
| CVE-2021-27182 | Alta (8.8) | 1.6% | — | 14 abr 2021 | An issue was discovered in MDaemon before 20.0.4. There is an IFRAME injection vulnerability in Webmail (aka WorldClient). It can be exploited via an email message. It allows an attacker to perform any action with the… |
| CVE-2021-27181 | Alta (8.8) | 0.65% | — | 14 abr 2021 | An issue was discovered in MDaemon before 20.0.4. Remote Administration allows an attacker to perform a fixation of the anti-CSRF token. In order to exploit this issue, the user has to click on a malicious URL provided… |
| CVE-2021-27180 | Media (6.1) | 0.93% | — | 14 abr 2021 | An issue was discovered in MDaemon before 20.0.4. There is Reflected XSS in Webmail (aka WorldClient). It can be exploited via a GET request. It allows performing any action with the privileges of the attacked user. |
| CVE-2019-8984 | Media (6.1) | 0.79% | — | 21 feb 2019 | MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 2 of 2). |
| CVE-2019-8983 | Media (6.1) | 0.79% | — | 21 feb 2019 | MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 1 of 2). |
| CVE-2012-2584 | Media (4.3) | 3.2% | — | 12 ago 2012 | Multiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) the Cascading Style Sheets (CSS)… |
| CVE-2008-2631 | Media (5) | 23% | — | 10 jun 2008 | The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted HTTP POST request. NOTE: the provenance of… |
| CVE-2008-1358 | Media (6.5) | 57% | — | 17 mar 2008 | Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to execute arbitrary code via a FETCH command with a long BODY. |