Lucene search

K

Opswat Security Vulnerabilities

cve
cve

CVE-2023-36658

An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. It has an unquoted service path that can be abused...

7.8CVSS

8.1AI Score

0.0004EPSS

2023-09-15 05:15 AM
10
cve
cve

CVE-2023-36659

An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Long inputs were not properly processed, which allows remote attackers to cause a denial of service (loss of...

9.8CVSS

9AI Score

0.001EPSS

2023-09-15 06:15 AM
10
cve
cve

CVE-2023-36657

An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Built-in features of Windows (desktop shortcuts, narrator) can be abused for privilege...

9.8CVSS

9.4AI Score

0.001EPSS

2023-09-15 06:15 AM
9
cve
cve

CVE-2022-32272

OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before 5.6.1 have incorrect access control, resulting in privilege...

9.8CVSS

9.5AI Score

0.049EPSS

2022-06-09 03:15 PM
37
7
cve
cve

CVE-2018-16275

OPSWAT MetaDefender before v4.11.2 allows CSV...

7.8CVSS

7.8AI Score

0.001EPSS

2022-10-03 04:22 PM
26
cve
cve

CVE-2022-40778

A stored Cross-Site Scripting (XSS) vulnerability in OPSWAT MetaDefender ICAP Server before 4.13.0 allows attackers to execute arbitrary JavaScript or HTML because of the blocked page...

5.4CVSS

5.3AI Score

0.001EPSS

2022-09-19 07:15 AM
33
17
cve
cve

CVE-2022-32273

As a result of an observable discrepancy in returned messages, OPSWAT MetaDefender Core (MDCore) before 5.1.2 could allow an authenticated user to enumerate filenames on the...

4.3CVSS

4.5AI Score

0.001EPSS

2022-06-08 04:15 PM
41
4