Read the docs

Isync Project

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Isync Project records in CISA KEV

No Isync Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Isync 4 records MEDIUM

Records

4 records in Isync · all components

TI-2021-02599 CVE-2021-3657 · GHSA-gq8r-4g7c-69vw

Memory corruption in isync

Priority MEDIUM 48

A flaw was found in mbsync versions prior to 1.4.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03488 Published 2022-02-18 No fix listed CWE-119
TI-2021-02527 CVE-2021-3578 · GHSA-4r75-vj28-w5c7

Incorrect type conversion in isync

Priority LOW 36

A flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a malicious or compromised server to write an arbitrary integer value past the end of a heap-allocated structure by issuing an u…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01037 Published 2022-02-16 No fix listed CWE-704
TI-2013-00220 CVE-2013-0289 · GHSA-x9p3-334f-m7g8

Isync 0.4 before 1.0.6, does not verify that the server hostname matches a domain name in…

Priority LOW 23

Isync 0.4 before 1.0.6, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01326 Published 2014-05-23 No fix listed CWE-310
Open these records in search →