Altn

Records25All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Altn records in CISA KEV

No Altn vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mdaemon 11 records MEDIUM Security Gateway For Email Servers 8 records MEDIUM Mdaemon Webmail 3 records MEDIUM Mdaemon Email Server 2 records LOW Securitygateway 1 record MEDIUM

Records

11 records in Mdaemon · all components

TI-2008-01307 CVE-2008-1358 · GHSA-gr8m-vjvh-3ww2

Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows…

MEDIUM 62

Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to execute arbitrary code via a FETCH command with a long BODY.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.57075 Published 2008-03-17 No fix listed CWE-119

TI-2008-02521 CVE-2008-2631 · GHSA-7w8f-xwjh-jcgp

The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to…

MEDIUM 43

The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted HTTP POST request.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.2279 Published 2008-06-10 No fix listed CWE-399

TI-2021-08729 CVE-2021-27182 · GHSA-xqqm-w483-3fhq

An issue was discovered in MDaemon before 20.0.4.

MEDIUM 41

An issue was discovered in MDaemon before 20.0.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01554 Published 2021-04-14 No fix listed CWE-74

TI-2021-08728 CVE-2021-27181 · GHSA-67cc-qhr2-wwqr

An issue was discovered in MDaemon before 20.0.4.

LOW 39

An issue was discovered in MDaemon before 20.0.4.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0065 Published 2021-04-14 No fix listed CWE-352

TI-2021-08730 CVE-2021-27183 · GHSA-vj3m-vm3j-x4j5

An issue was discovered in MDaemon before 20.0.4.

LOW 37

An issue was discovered in MDaemon before 20.0.4.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02695 Published 2021-04-14 No fix listed CWE-610

TI-2021-08727 CVE-2021-27180 · GHSA-7wfx-rcx6-fp9g

An issue was discovered in MDaemon before 20.0.4.

LOW 29

An issue was discovered in MDaemon before 20.0.4.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00926 Published 2021-04-14 No fix listed CWE-79

TI-2019-06475 CVE-2019-8984 · GHSA-89vw-mgg8-jw84

MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 2 of 2).

LOW 29

MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 2 of 2).

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00793 Published 2019-02-21 No fix listed CWE-79

TI-2019-06474 CVE-2019-8983 · GHSA-jxvw-q9gm-x4x5

MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 1 of 2).

LOW 29

MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 1 of 2).

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00793 Published 2019-02-21 No fix listed CWE-79

TI-2012-02242 CVE-2012-2584 · GHSA-3c65-jw75-c45f

Multiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow…

LOW 26

Multiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) the Cascading Style Sheets (CSS) expressi…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03232 Published 2012-08-12 No fix listed CWE-79

TI-2022-12316 CVE-2022-29976 · GHSA-w6xx-6vmv-w2mv

An Authenticated Reflected Cross-site scripting at BCC Parameter was discovered in MDaemon before 22.0.0 .

LOW 25

An Authenticated Reflected Cross-site scripting at BCC Parameter was discovered in MDaemon before 22.0.0 .

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00493 Published 2022-05-11 No fix listed CWE-79

TI-2022-12315 CVE-2022-29975 · GHSA-8vw5-h2x8-2hgr

An Authenticated Reflected Cross-site scripting at CC Parameter was discovered in MDaemon before 22.0.0 .

LOW 25

An Authenticated Reflected Cross-site scripting at CC Parameter was discovered in MDaemon before 22.0.0 .

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00493 Published 2022-05-11 No fix listed CWE-79

Open these records in search →