Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3017▼ 66 respecto a la semana anterior
Críticas / altas1412▲ 56 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)381▼ 129 respecto a la semana anterior
7 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (9.3) | 6.2% | — | Pmail Pegasus Mail | 2/11/2009 | 16/6/2026 | Stack-based buffer overflow in Pegasus Mail (PMail) 4.41 and possibly 4.51 allows remote POP3 servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long error message. | |
| Modificada | Media (5.1) | 3.2% | — | David Harris Pegasus Mail | 21/12/2005 | 16/6/2026 | Stack-based buffer overflow in the trace message functionality in Pegasus Mail 4.21a through 4.21c and 4.30PB1 allow remote attackers to execute arbitrary code via a long POP3 reply. | |
| Modificada | Media (5.1) | 3.1% | — | David Harris Pegasus Mail | 21/12/2005 | 16/6/2026 | Off-by-one error in Pegasus Mail 4.21a through 4.21c and 4.30PB1 allows remote attackers to execute arbitrary code via a long email message header, which triggers a one-byte buffer overflow. | |
| Modificada | Alta (7.5) | 5.7% | — | David Harris Pegasus Mail | 4/10/2002 | 16/6/2026 | Buffer overflow in Pegasus mail client 4.01 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) To or (2) From headers. | |
| Modificada | Media (5) | 7.7% | — | David Harris Pegasus Mail | 19/12/2000 | 23/9/2026 | Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch. | |
| Modificada | Alta (7.5) | 2.0% | — | David Harris Pegasus Mail | 19/12/2000 | 25/9/2026 | Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long email message containing binary data. | |
| Modificada | Baja (3.6) | 0.20% | — | David Harris Pegasus Mail | 15/5/1999 | 16/6/2026 | Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily decrypt the passwords and read e-mail. |