Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2623▼ 237 respecto a la semana anterior

Críticas / altas1384▲ 151 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 473 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2019-9557	Modificada	Media (6.1)	0.98%	—	Codecrafters Ability Mail Server	12/3/2019	17/6/2026	Ability Mail Server 4.2.6 has Persistent Cross Site Scripting (XSS) via the body e-mail body. To exploit the vulnerability, the victim must open an email with malicious Javascript inserted into the body of the email as an iframe.
CVE-2017-17752	Modificada	Media (6.1)	1.4%	—	Codecrafters Ability Mail Server	20/12/2017	17/6/2026	Ability Mail Server 3.3.2 has Cross Site Scripting (XSS) via the body of an e-mail message, with JavaScript code executed on the Read Mail screen (aka the /_readmail URI). This is fixed in version 4.2.4.
CVE-2013-6162	Modificada	Media (4.3)	1.4%	—	Code-crafters Ability Mail Server	21/12/2013	17/6/2026	Cross-site scripting (XSS) vulnerability in Code-Crafters Ability Mail Server 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email.
CVE-2009-3445	Modificada	Media (5)	2.2%	—	Code-crafters Ability Mail Server	28/9/2009	16/6/2026	Unspecified vulnerability in Code-Crafters Ability Mail Server before 2.70 allows remote attackers to cause a denial of service (daemon crash) via an IMAP4 FETCH command.
CVE-2007-6101	Modificada	Media (4)	1.4%	—	Code-crafters Ability Mail Server	23/11/2007	16/6/2026	Ability Mail Server before 2.61 allows remote authenticated users to cause a denial of service (daemon crash) via (1) malformed number list ranges in unspecified IMAP commands, and possibly (2) a blank string in unspecified messages.
CVE-2004-2494	Modificada	Media (4.3)	1.9%	—	Ability Mail Server^AI	31/12/2004	16/6/2026	Cross-site scripting (XSS) vulnerability in _error in Ability Mail Server 1.18 allows remote attackers to inject arbitrary web script or HTML via the erromsg parameter.
CVE-2004-2495	Modificada	Alta (7.8)	2.0%	—	Code-crafters Ability Mail Server	31/12/2004	16/6/2026	The (1) Webmail, (2) admin, and (3) SMTP services in Ability Mail Server 1.18 allow remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous connections to the service.