Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior

Críticas / altas1452▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2021-22848	Modificada	Crítica (9.8)	0.98%	—	Hgiga Msr45 Isherlock-antispam Hgiga Msr45 Isherlock-user Hgiga Ssr45 Isherlock-antispam Hgiga Ssr45 Isherlock-user	18/3/2021	17/6/2026	HGiga MailSherlock contains a SQL Injection. Remote attackers can inject SQL syntax and execute SQL commands in a URL parameter of email pages without privilege.
CVE-2020-35743	Modificada	Alta (7.6)	0.61%	—	Hgiga Msr45 Isherlock-antispam Hgiga Msr45 Isherlock-user Hgiga Ssr45 Isherlock-antispam Hgiga Ssr45 Isherlock-user	31/12/2020	17/6/2026	HGiga MailSherlock contains a SQL injection flaw. Attackers can inject and launch SQL commands in a URL parameter of specific cgi pages.
CVE-2020-35742	Modificada	Alta (7.6)	0.61%	—	Hgiga Msr45 Isherlock-antispam Hgiga Msr45 Isherlock-user Hgiga Ssr45 Isherlock-antispam Hgiga Ssr45 Isherlock-user	31/12/2020	17/6/2026	HGiga MailSherlock contains a vulnerability of SQL Injection. Attackers can inject and launch SQL commands in a URL parameter.
CVE-2020-35741	Modificada	Media (6.1)	0.62%	—	Hgiga Msr45 Isherlock-antispam Hgiga Msr45 Isherlock-user Hgiga Ssr45 Isherlock-antispam Hgiga Ssr45 Isherlock-user	31/12/2020	17/6/2026	HGiga MailSherlock does not validate user parameters on multiple login pages. Attackers can use the vulnerability to inject JavaScript syntax for XSS attacks.
CVE-2020-35740	Modificada	Media (6.1)	0.62%	—	Hgiga Msr45 Isherlock-antispam Hgiga Msr45 Isherlock-user Hgiga Ssr45 Isherlock-antispam Hgiga Ssr45 Isherlock-user	31/12/2020	17/6/2026	HGiga MailSherlock does not validate specific URL parameters properly that allows attackers to inject JavaScript syntax for XSS attacks.
CVE-2020-25848	Modificada	Crítica (9.8)	1.7%	—	Hgiga Msr45 Isherlock-antispam Hgiga Msr45 Isherlock-audit Hgiga Msr45 Isherlock-base Hgiga Msr45 Isherlock-user+6	31/12/2020	17/6/2026	HGiga MailSherlock contains weak authentication flaw that attackers grant privilege remotely with default password generation mechanism.