Lucene search
+L

6240 matches found

Cvelist
Cvelist
•added 2025/12/10 4:08 p.m.•68 views

CVE-2025-34424 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIDP.DLL

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIDP.DLL from its installation directory without sufficient integrity validation or a secure search order. A...

8.5CVSS0.00168EPSS
SaveExploits0References3
CVE
CVE
•added 2025/12/10 4:08 p.m.•62 views

CVE-2025-34424

MailEnable (Windows) versions prior to 10.54 are affected by an unsafe DLL loading issue where the administrative executable loads MEAIDP.DLL from the installation directory without proper integrity checks or a secure search order. This allows a local attacker with write access to that directory ...

8.5CVSS6.4AI score0.00168EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2025/12/10 4:07 p.m.•59 views

CVE-2025-34423 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIAU.DLL

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIAU.DLL from its installation directory without sufficient integrity validation or a secure search order. A...

8.5CVSS0.00168EPSS
SaveExploits0References3
CVE
CVE
•added 2025/12/10 4:07 p.m.•51 views

CVE-2025-34423

The CVE concerns MailEnable prior to 10.54 where the MailEnable administrative executable loads MEAIAU.DLL from the installation directory without sufficient integrity validation or a secure search order. An attacker with local write access to that directory can place a malicious MEAIAU.DLL, whic...

8.5CVSS6.4AI score0.00168EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/10 4:07 p.m.•8 views

CVE-2025-34423 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIAU.DLL

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIAU.DLL from its installation directory without sufficient integrity validation or a secure search order. A...

8.5CVSS6.4AI score0.00168EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/12/10 4:07 p.m.•70 views

CVE-2025-34420 MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIAM.DLL

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIAM.DLL from its installation directory without sufficient integrity validation or a secure search order. A...

8.5CVSS0.00171EPSS
SaveExploits0References3
CVE
CVE
•added 2025/12/10 4:07 p.m.•49 views

CVE-2025-34420

MailEnable

8.5CVSS6.4AI score0.00171EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2025/12/10 3:31 p.m.•15 views

GHSA-MQ8M-42GH-WQ7R Gogs vulnerable to a bypass of CVE-2024-55947

Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code...

8.7CVSS7.6AI score0.85202EPSS
SaveExploits27References13
osv_cve
osv_cve
•added 2025/12/10 2:16 p.m.•16 views

CVE-2025-8110

Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code...

8.8CVSS6.9AI score
SaveExploits0References9
NVD
NVD
•added 2025/12/10 2:16 p.m.•17 views

CVE-2025-8110

Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code...

8.8CVSS0.85202EPSS
SaveExploits27References9
Mend
Mend
•added 2025/12/10 1:23 p.m.•3 views

CVE-2025-8110

Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code...

8.8CVSS7.6AI score0.85202EPSS
SaveExploits27References13
CVE
CVE
•added 2025/12/10 1:23 p.m.•274 views

CVE-2025-8110

CVE-2025-8110 affects Gogs self-hosted Git service versions 0.13.3 and earlier, due to improper symbolic link handling in PutContents that allows a symlink to target outside the repository, enabling remote code execution. Root cause: API writes to file paths without validating symlinks. Impact: l...

8.8CVSS7.6AI score0.85202EPSS
SaveIn wildExploits27References9Affected Software1
EUVD
EUVD
•added 2025/12/10 1:23 p.m.•14 views

EUVD-2025-202425

Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code...

8.7CVSS7.7AI score0.85202EPSS
SaveExploits27References3
Vulnrichment
Vulnrichment
•added 2025/12/10 1:23 p.m.•5 views

CVE-2025-8110 File overwrite in file update API in Gogs

Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code...

8.7CVSS7.6AI score0.85202EPSS
SaveExploits27References1
CNNVD
CNNVD
•added 2025/12/10 12:00 a.m.•22 views

MailEnable code-related vulnerabilities

MailEnable is a Windows-based business e-mail server from MailEnable Australia. MailEnable suffers from an insecure DLL loading vulnerability that can be exploited by an attacker to cause local arbitrary code execution...

8.5CVSS6.5AI score0.00168EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/10 12:00 a.m.•8 views

CVE-2025-8110: Improper Limitation of a Pathname to a Restricted Directory

Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code...

8.8CVSS7.7AI score0.85202EPSS
SaveExploits27References6
CNNVD
CNNVD
•added 2025/12/10 12:00 a.m.•24 views

MailEnable code-related vulnerabilities

MailEnable is a Windows-based business e-mail server from MailEnable Australia. MailEnable suffers from a MailEnable Insecure DLL Load vulnerability that can be exploited by an attacker to cause local arbitrary code execution...

8.5CVSS6.5AI score0.00171EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/12/10 12:00 a.m.•26 views

PT-2025-50345

Name of the Vulnerable Software and Affected Versions MailEnable versions prior to 10.54 Description MailEnable versions prior to 10.54 have an issue where the software loads DLLs unsafely, potentially allowing a local attacker to run arbitrary code. The MailEnable administrative executable loads...

8.5CVSS6.2AI score0.00196EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/12/10 12:00 a.m.•21 views

PT-2025-50341

Name of the Vulnerable Software and Affected Versions MailEnable versions prior to 10.54 Description MailEnable versions prior to 10.54 have an issue where an unsafe Dynamic Link Library DLL loading process can allow a local attacker to execute arbitrary code. The MailEnable administrative...

8.5CVSS6.7AI score0.00171EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/12/10 12:00 a.m.•24 views

PT-2025-50348

Name of the Vulnerable Software and Affected Versions MailEnable versions prior to 10.54 Description MailEnable versions prior to 10.54 have an issue where the software loads DLLs unsafely, potentially allowing a local attacker to run arbitrary code. The MailEnable administrative executable loads...

8.5CVSS6.2AI score0.00168EPSS
SaveExploits0References6
Rows per page
Query Builder