Lucene search
+L

46 matches found

NVD
NVD
•added 2026/02/09 8:16 a.m.•27 views

CVE-2026-2234

C&Cm@il developed by HGiga has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read and modify any user's mail content...

9.3CVSS0.00466EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/02/09 7:20 a.m.•9 views

CVE-2026-2236

C&Cm@il developed by HGiga has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...

8.7CVSS6.3AI score0.00426EPSS
SaveExploits0References3
CVE
CVE
•added 2026/02/09 7:20 a.m.•28 views

CVE-2026-2236

CVE-2026-2236 affects C&Cm@il by HGiga. The provided documents describe an unauthenticated SQL Injection in the web application that enables reading database contents. No explicit root-cause details or affected versions are given beyond the product name. Exploitation status is not detailed beyond...

8.7CVSS6.3AI score0.00426EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/09 7:17 a.m.•30 views

CVE-2026-2235

CVE-2026-2235 affects C&Cm@il (HGiga). The vulnerability is a SQL Injection in the application that allows authenticated remote attackers to inject arbitrary SQL to read database contents. It is documented across multiple sources (NVD, CVE List, Attackers KB, PT Security) with the same descriptio...

7.1CVSS6.3AI score0.00283EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/09 7:09 a.m.•43 views

CVE-2026-2234

CVE-2026-2234 concerns the C&Cm@il product developed by HGiga, described as a Missing Authentication vulnerability that allows unauthenticated remote attackers to read and modify any user’s mail content. The available entries consistently state a network-accessible flaw with no authentication req...

9.3CVSS5.5AI score0.00466EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2000-0553

Malware in sbrugna...

5CVSS6.4AI score0.01881EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2000-0554

Malware in sbrugna...

10CVSS6.4AI score0.04334EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-1999-1502

Malware in sbrugna...

10CVSS6.4AI score0.08054EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2020-2964

Malware in sbrugna...

10CVSS9.2AI score0.02234EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2020-2965

Malware in sbrugna...

9CVSS8.6AI score0.01414EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2001-0727

Malware in sbrugna...

7.5CVSS6.4AI score0.01359EPSS
SaveExploits0References2
NVD
NVD
•added 2020/04/15 7:15 a.m.•34 views

CVE-2020-10511

HGiga C&Cmail CCMAILQ before olln-base-6.0-418.i386.rpm and CCMAILN before olln-base-5.0-418.i386.rpm contains insecure configurations. Attackers can exploit these flaws to access unauthorized functionality via a crafted URL...

10CVSS9.4AI score0.02234EPSS
SaveExploits0References3
NVD
NVD
•added 2020/04/15 7:15 a.m.•34 views

CVE-2020-10512

HGiga C&Cmail CCMAILQ before olln-calendar-6.0-100.i386.rpm and CCMAILN before olln-calendar-5.0-100.i386.rpm contains a SQL Injection vulnerability which allows attackers to injecting SQL commands in the URL parameter to execute unauthorized commands...

9CVSS9.1AI score0.01414EPSS
SaveExploits0References3
Prion
Prion
•added 2020/04/15 7:15 a.m.•32 views

Sql injection

HGiga C&Cmail CCMAILQ before olln-calendar-6.0-100.i386.rpm and CCMAILN before olln-calendar-5.0-100.i386.rpm contains a SQL Injection vulnerability which allows attackers to injecting SQL commands in the URL parameter to execute unauthorized commands...

9CVSS9AI score0.01414EPSS
SaveExploits0References3
Prion
Prion
•added 2020/04/15 7:15 a.m.•31 views

Design/Logic Flaw

HGiga C&Cmail CCMAILQ before olln-base-6.0-418.i386.rpm and CCMAILN before olln-base-5.0-418.i386.rpm contains insecure configurations. Attackers can exploit these flaws to access unauthorized functionality via a crafted URL...

10CVSS9.2AI score0.02234EPSS
SaveExploits0References3
CVE
CVE
•added 2020/04/15 6:20 a.m.•63 views

CVE-2020-10512

CVE-2020-10512 affects HGiga C&Cmail CCMAILQ (before olln-calendar-6.0-100.i386.rpm) and CCMAILN (before olln-calendar-5.0-100.i386.rpm). It is a SQL injection vulnerability in a URL parameter that allows an attacker to inject SQL commands to execute unauthorized commands. The CVSS context indica...

9CVSS9.2AI score0.01414EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2020/04/15 6:20 a.m.•39 views

CVE-2020-10512 HGiga C&Cmail - SQL Injection

HGiga C&Cmail CCMAILQ before olln-calendar-6.0-100.i386.rpm and CCMAILN before olln-calendar-5.0-100.i386.rpm contains a SQL Injection vulnerability which allows attackers to injecting SQL commands in the URL parameter to execute unauthorized commands...

8.8CVSS9.1AI score0.01414EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2020/04/15 6:20 a.m.•42 views

CVE-2020-10511 HGiga C&Cmail - Broken Access Control

HGiga C&Cmail CCMAILQ before olln-base-6.0-418.i386.rpm and CCMAILN before olln-base-5.0-418.i386.rpm contains insecure configurations. Attackers can exploit these flaws to access unauthorized functionality via a crafted URL...

9.8CVSS9.3AI score0.02234EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/15 12:00 a.m.•3 views

CVE-2020-10511: Improper Neutralization of Special Elements used in an OS Command

HGiga C&Cmail CCMAILQ before olln-base-6.0-418.i386.rpm and CCMAILN before olln-base-5.0-418.i386.rpm contains insecure configurations. Attackers can exploit these flaws to access unauthorized functionality via a crafted URL...

10CVSS8.2AI score0.02234EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/15 12:00 a.m.•3 views

CVE-2020-10512: Improper Neutralization of Special Elements used in an SQL Command

HGiga C&Cmail CCMAILQ before olln-calendar-6.0-100.i386.rpm and CCMAILN before olln-calendar-5.0-100.i386.rpm contains a SQL Injection vulnerability which allows attackers to injecting SQL commands in the URL parameter to execute unauthorized commands...

9CVSS8AI score0.01414EPSS
SaveExploits0References3
Rows per page
Query Builder