Lucene search
+L

14 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2004-1127

Malware in sbrugna...

10CVSS6.4AI score0.01933EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2021-19472

Malware in sbrugna...

8.8CVSS5AI score0.01107EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/05/22 7:45 p.m.•19 views

CVE-2021-32652

Nextcloud Mail is a mail app for the Nextcloud platform. A missing permission check in Nextcloud Mail before 1.4.3 and 1.8.2 allows another authenticated users to access mail metadata of other users. Versions 1.4.3 and 1.8.2 contain patches for this vulnerability; no workarounds other than the...

8.8CVSS6.5AI score0.01107EPSS
SaveExploits1References1
NVD
NVD
•added 2021/06/01 7:15 p.m.•49 views

CVE-2021-32652

Nextcloud Mail is a mail app for the Nextcloud platform. A missing permission check in Nextcloud Mail before 1.4.3 and 1.8.2 allows another authenticated users to access mail metadata of other users. Versions 1.4.3 and 1.8.2 contain patches for this vulnerability; no workarounds other than the...

8.8CVSS0.01107EPSS
SaveExploits1References2
OSV
OSV
•added 2021/06/01 7:15 p.m.•27 views

CVE-2021-32652

Nextcloud Mail is a mail app for the Nextcloud platform. A missing permission check in Nextcloud Mail before 1.4.3 and 1.8.2 allows another authenticated users to access mail metadata of other users. Versions 1.4.3 and 1.8.2 contain patches for this vulnerability; no workarounds other than the...

4.3CVSS6.5AI score
SaveExploits0References2
Prion
Prion
•added 2021/06/01 7:15 p.m.•29 views

Design/Logic Flaw

Nextcloud Mail is a mail app for the Nextcloud platform. A missing permission check in Nextcloud Mail before 1.4.3 and 1.8.2 allows another authenticated users to access mail metadata of other users. Versions 1.4.3 and 1.8.2 contain patches for this vulnerability; no workarounds other than the...

4CVSS4.4AI score0.01107EPSS
SaveExploits1References2Affected Software1
attackerkb
attackerkb
•added 2021/06/01 7:15 p.m.•11 views

CVE-2021-32652

Nextcloud Mail is a mail app for the Nextcloud platform. A missing permission check in Nextcloud Mail before 1.4.3 and 1.8.2 allows another authenticated users to access mail metadata of other users. Versions 1.4.3 and 1.8.2 contain patches for this vulnerability; no workarounds other than the...

8.8CVSS6.1AI score0.01107EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/01 12:00 a.m.•5 views

CVE-2021-32652: Improper Access Control

Nextcloud Mail is a mail app for the Nextcloud platform. A missing permission check in Nextcloud Mail before 1.4.3 and 1.8.2 allows another authenticated users to access mail metadata of other users. Versions 1.4.3 and 1.8.2 contain patches for this vulnerability; no workarounds other than the...

8.8CVSS5.8AI score0.01107EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/06/01 12:00 a.m.•21 views

PT-2021-19830 · Nextcloud · Nextcloud Mail

Name of the Vulnerable Software and Affected Versions: Nextcloud Mail versions prior to 1.4.3 Nextcloud Mail versions prior to 1.8.2 Description: A missing permission check in Nextcloud Mail allows another authenticated user to access mail metadata of other users. Recommendations: For versions...

8.8CVSS7AI score0.01107EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2021/06/01 12:00 a.m.•22 views

Nextcloud 访问控制错误漏洞

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. An access control error vulnerability exists in Nextcloud Mail versions prior to 1.4.3, and prior to 1.8.2, which can be exploited by an authenticated attacke...

8.8CVSS5.6AI score0.01107EPSS
SaveExploits1References4
NVD
NVD
•added 2005/01/10 5:00 a.m.•27 views

CVE-2004-1129

SQL injection vulnerability in 1 fdelmail.asp, 2 addressc.asp, and possibly 3 postmail.asp and 4 fmvmail.asp in CMailServer 5.2 allow remote attackers to inject arbitrary SQL commands and delete mail metadata or e-mail addresses of contacts via the indexOfMail parameter...

10CVSS7.9AI score0.01933EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2004/12/05 5:00 a.m.•38 views

CVE-2004-1129

SQL injection vulnerability in 1 fdelmail.asp, 2 addressc.asp, and possibly 3 postmail.asp and 4 fmvmail.asp in CMailServer 5.2 allow remote attackers to inject arbitrary SQL commands and delete mail metadata or e-mail addresses of contacts via the indexOfMail parameter...

7.9AI score0.01933EPSS
SaveExploits0References4
CVE
CVE
•added 2004/12/05 5:00 a.m.•64 views

CVE-2004-1129

CVE-2004-1129 affects YoungZSoft CMailServer 5.2. A remote SQL injection is possible in the components fdelmail.asp, addressc.asp, and possibly postmail.asp and fmvmail.asp via the indexOfMail parameter, allowing an attacker to inject arbitrary SQL commands and compromise mail metadata and contac...

10CVSS8AI score0.01933EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2004/12/05 12:00 a.m.•6 views

CVE-2004-1129: Undefined Security Weakness

SQL injection vulnerability in 1 fdelmail.asp, 2 addressc.asp, and possibly 3 postmail.asp and 4 fmvmail.asp in CMailServer 5.2 allow remote attackers to inject arbitrary SQL commands and delete mail metadata or e-mail addresses of contacts via the indexOfMail parameter...

10CVSS6AI score0.01933EPSS
SaveExploits0References1
Rows per page
Query Builder