CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

297 matches found

Kitploit•added 2026/10/06 2:51 a.m.•16 views

CVE-2023-51518

CVE-2023-51518: Preauthenticated Java Deserialization via JMX in Apache James Apache James distribution prior to release 3.7.5 and 3.8.1 allow privilege escalation via JMX pre-authentication deserialization. Given a deserialization gadget, this could be leveraged as part of an exploit chain that...

9.8CVSS8.3AI score0.01189EPSS

SaveExploits0References2

Kitploit•added 2026/10/04 10:39 a.m.•18 views

CVE-2023-26269

CVE-2023-26269: Misconfigured JMX in Apache James By default Apache James opens a JMXRMI service that listens on localhost, port 9999. Because the JMX is misconfigured to allow unauthenticated access, an attacker that has local access to the machine running James can use a “MLet attack” in order ...

7.8CVSS7.5AI score0.00654EPSS

SaveExploits0References1

Kitploit•added 2026/10/03 12:53 p.m.•13 views

asf__james-project_CVE-2022-22931_3-6-0

Apache James Project :latestjamesversion: 3.8.0 image:https://img.shields.io/badge/Join%20us-Mailing%20lists-purple.svglink="https://james.apache.org/mail.html" link:https://gitter.im/apache/james-projectimage:https://badges.gitter.im/apache/james-project.svgJoin the chat at...

4.3CVSS6.1AI score0.01761EPSS

SaveExploits0References6

Kitploit•added 2026/10/02 6:05 a.m.•10 views

MAL-010

MAL-010: Apache James에서 JMX를 통해 접근 가능한 위험한 MBeans localhost, 포트 9999에서 JMX가 노출하는 MBeans를 나열하고 검사함으로써 다음과 같은 공격 벡터가 식별되었습니다: Log4J를 이용한 임의 파일 쓰기 Log4J를 이용한 임의 파일 읽기 참고: CVE-2023-26269에서 소개된 “MLet 공격”과 달리, 이 취약점은 인증이 요구되는 경우에도, 공격자가 JMX 자격 증명을 알고 있다면 작동합니다. 공급업체 공개: 이 취약점은 CVE-2023-26269의 대체 공격 벡터를...

7.8CVSS7.5AI score0.00654EPSS

SaveExploits0References2

EUVD•added 2025/10/07 12:30 a.m.•17 views

EUVD-2006-2803

Malware in sbrugna...

7.8CVSS6.4AI score0.06605EPSS

SaveExploits1References6

EUVD•added 2025/10/03 8:07 p.m.•14 views

EUVD-2024-53882