Lucene search
+L

644 matches found

NVD
NVD
added 2021/02/03 6:15 p.m.12 views

CVE-2020-18724

Authenticated stored cross-site scripting XSS in the contact name field in the distribution list of MDaemon webmail 19.5.5 allows an attacker to executes code and perform a XSS attack while opening a contact list...

5.4CVSS0.03191EPSS
SaveExploits3References3
OSV
OSV
added 2021/02/03 6:15 p.m.6 views

CVE-2020-18723

Stored cross-site scripting XSS in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code on the email recipient side while forwarding an email to perform potentially malicious activities...

5.4CVSS6.2AI score0.03799EPSS
SaveExploits3References3
OSV
OSV
added 2021/02/03 6:15 p.m.9 views

CVE-2020-18724

Authenticated stored cross-site scripting XSS in the contact name field in the distribution list of MDaemon webmail 19.5.5 allows an attacker to executes code and perform a XSS attack while opening a contact list...

5.4CVSS6AI score0.03191EPSS
SaveExploits3References3
Prion
Prion
added 2021/02/03 6:15 p.m.17 views

Cross site scripting

Stored cross-site scripting XSS in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code on the email recipient side while forwarding an email to perform potentially malicious activities...

3.5CVSS5.4AI score0.03799EPSS
SaveExploits3References3Affected Software1
Prion
Prion
added 2021/02/03 6:15 p.m.19 views

Cross site scripting

Authenticated stored cross-site scripting XSS in the contact name field in the distribution list of MDaemon webmail 19.5.5 allows an attacker to executes code and perform a XSS attack while opening a contact list...

3.5CVSS5.1AI score0.03191EPSS
SaveExploits3References3Affected Software1
Cvelist
Cvelist
added 2021/02/03 5:27 p.m.22 views

CVE-2020-18724

Authenticated stored cross-site scripting XSS in the contact name field in the distribution list of MDaemon webmail 19.5.5 allows an attacker to executes code and perform a XSS attack while opening a contact list...

5.2AI score0.03191EPSS
SaveExploits3References3
CVE
CVE
added 2021/02/03 5:27 p.m.79 views

CVE-2020-18724

CVE-2020-18724 affects MDaemon Webmail 19.5.5, where an authenticated user can trigger a stored XSS in the contact name field of a distribution list; payloads are executed when opening the contact list. Public exploit details exist (PacketStorm) and a vendor security update (ALTN) is referenced f...

5.4CVSS5.1AI score0.03191EPSS
SaveExploits3References3Affected Software1
CVE
CVE
added 2021/02/03 5:25 p.m.74 views

CVE-2020-18723

MDaemon Webmail 19.5.5 is affected by a Stored XSS in the file attachment field. The vulnerability allows an attacker to execute code on the email recipient’s side when forwarding an email. No remediation or patch details are provided in the connected documents. Exploitation status is not specifi...

5.4CVSS5.2AI score0.03799EPSS
SaveExploits3References3Affected Software1
Cvelist
Cvelist
added 2021/02/03 5:25 p.m.40 views

CVE-2020-18723

Stored cross-site scripting XSS in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code on the email recipient side while forwarding an email to perform potentially malicious activities...

5.3AI score0.03799EPSS
SaveExploits3References3
CNNVD
CNNVD
added 2021/02/03 12:0 a.m.9 views

MDaemon Webmail 跨站脚本漏洞

MDaemon Webmail is a server-side application for providing mail services from MDaemon, Inc. in the United States. A cross-site scripting vulnerability exists in MDaemon webmail 19.5.5, which allows attackers to execute code and XSS attacks while opening a contact list...

5.4CVSS6.1AI score0.03191EPSS
SaveExploits3References6
CNNVD
CNNVD
added 2021/02/03 12:0 a.m.8 views

MDaemon Webmail 跨站脚本漏洞

MDaemon Webmail is a server-side application for providing mail services from MDaemon, Inc. in the United States. A cross-site scripting vulnerability exists in MDaemon webmail 19.5.5 that allows an attacker to execute code on the email recipient's end while forwarding an email...

5.4CVSS6.1AI score0.03799EPSS
SaveExploits3References6
Gitee
Gitee
added 2020/03/07 6:1 p.m.9 views

shadowbroker

This repository, Zam-0703/shadowbroker, contains a collection of exploits and tools for various vulnerabilities. The repository was created by the Shadow Brokers, a group known for releasing stolen NSA hacking tools. The repository includes exploits for several vulnerabilities, including:...

8.5AI score
SaveExploits0
CNVD
CNVD
added 2020/01/20 12:0 a.m.7 views

MDaemon Email Server Cross-Site Scripting Vulnerability

MDaemon Email Server is an email server. A cross-site scripting vulnerability exists in MDaemon Email Server version 17.5.1. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute client-side code...

5.4CVSS6.4AI score0.00602EPSS
SaveExploits1References1
NVD
NVD
added 2019/12/17 7:15 p.m.27 views

CVE-2019-19497

MDaemon Email Server 17.5.1 allows XSS via the filename of an attachment to an email message...

5.4CVSS5.3AI score0.00602EPSS
SaveExploits1References2
OSV
OSV
added 2019/12/17 7:15 p.m.6 views

CVE-2019-19497

MDaemon Email Server 17.5.1 allows XSS via the filename of an attachment to an email message...

5.4CVSS6.1AI score0.00602EPSS
SaveExploits1References2
Prion
Prion
added 2019/12/17 7:15 p.m.18 views

Cross site scripting

MDaemon Email Server 17.5.1 allows XSS via the filename of an attachment to an email message...

3.5CVSS5.2AI score0.00602EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2019/12/17 6:40 p.m.51 views

CVE-2019-19497

CVE-2019-19497 affects MDaemon Email Server 17.5.1 and is a Cross‑Site Scripting (XSS) vulnerability triggered by the filename of an email attachment. Public docs identify the root cause as a lack of proper validation of client‑side data by the web application, enabling injection of script throug...

5.4CVSS5.2AI score0.00602EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2019/12/17 6:40 p.m.25 views

CVE-2019-19497

MDaemon Email Server 17.5.1 allows XSS via the filename of an attachment to an email message...

5.3AI score0.00602EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2019/11/22 12:0 a.m.16 views

Alt-N MDaemon Mail Server Detection (HTTP)

HTTP based detection of Alt-N MDaemon Mail Server. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4AI score
SaveExploits0
Gitee
Gitee
added 2019/11/11 4:11 p.m.5 views

shadowbroker

This repository, "Cross6/shadowbroker", contains a collection of exploits and tools leaked by the Shadow Brokers, a group known for releasing sensitive information. The repository includes a README file that lists the contents of the repository, which includes various exploit modules and tools...

7.1AI score
SaveExploits0
Rows per page
Query Builder