Priority MEDIUM 50
Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Unite! 1.0 SP1 (1.0.1) before bundle 36 and BlackBerry Enterprise Server 4.1 SP3 (4.1.3) through 4.1 SP5 (4.1.5)…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06876 · Published 2008-07-21 · No fix listed CWE-94
Priority MEDIUM 49
Multiple buffer overflows in the PDF Distiller in the BlackBerry Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server 4.1.3 through 5.0.2, and Enterprise Server Express 5.0.1 and 5.0.2, a…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05718 · Published 2011-01-12 · No fix listed CWE-119
Priority MEDIUM 48
Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 5.0 and BlackBerry Professional Software…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05046 · Published 2009-07-28 · No fix listed
Priority MEDIUM 47
Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 4.1.7 and 5.0.0, and BlackBerry Professi…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04318 · Published 2010-04-21 · No fix listed
Priority MEDIUM 46
Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 4.1.6 and BlackBerry Professional Softwa…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.03611 · Published 2009-07-30 · No fix listed
Priority MEDIUM 46
Research in Motion BlackBerry Enterprise Server 4.0 through 4.1 has a default configuration that permits installation of arbitrary third-party applications on BlackBerry devices, which might facilitate loading of malware…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.01446 · Published 2007-06-28 · No fix listed
Priority MEDIUM 41
Research in Motion (RIM) BlackBerry Router allows remote attackers to cause a denial of service (communication disruption) via crafted Server Routing Protocol (SRP) packets.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.03892 · Published 2006-01-02 · No fix listed
Priority LOW 39
Multiple buffer overflows in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.7 and earlier and 5.0.0 through 5.0.2, and BlackBerry Profess…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.0329 · Published 2010-10-14 · No fix listed CWE-119
Priority LOW 39
Buffer overflow in the decompression algorithm in Research in Motion BlackBerry Enterprise Server 4.0 SP1 and earlier before 20050607 might allow remote attackers to execute arbitrary code via certain data packets.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03246 · Published 2007-06-29 · No fix listed CWE-119
Priority LOW 37
Heap-based buffer overflow in Research in Motion (RIM) BlackBerry Attachment Service allows remote attackers to cause a denial of service (hang) via an e-mail attachment with a crafted TIFF file.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02194 · Published 2006-01-02 · No fix listed CWE-119
Priority LOW 35
Multiple buffer overflows in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Enterprise Server 5.0.0 through 5.0.2, 4.1.6, and 4.1.7 allow remote attackers to cause a denial of service (cra…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02917 · Published 2010-12-17 · No fix listed CWE-119
Priority LOW 33
The BlackBerry Collaboration Service in Research In Motion (RIM) BlackBerry Enterprise Server (BES) 5.0.3 through MR4 for Microsoft Exchange and Lotus Domino allows remote authenticated users to log into arbitrary user a…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.02104 · Published 2011-10-21 · No fix listed CWE-264
Priority LOW 33
Unspecified vulnerability in the BlackBerry Administration API in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 5.0.1 through 5.0.3, and BlackBerry Enterprise Server Express software 5.0.1 through…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.02194 · Published 2011-07-14 · No fix listed
Priority LOW 28
Buffer overflow in BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server 2.2 and 4.0 before SP3 Hotfix 4 for IBM Lotus Domino, 3.6 before SP7 and 5.0 before SP3 Hotfix 3 for Microsoft Exc…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.02717 · Published 2006-02-18 · No fix listed
Priority LOW 28
The BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.0 to version 4.0 Service Pack 2 allows attackers to cause a denial of service via a malformed Portable Network Graphics (…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02453 · Published 2006-01-09 · No fix listed CWE-119
Priority LOW 26
Cross-site scripting (XSS) vulnerability in the "Customize Statistics Page" (admin/statistics/ConfigureStatistics) in the MDS Connection Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) before 4.1.6…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03493 · Published 2009-04-22 · No fix listed CWE-79
Priority LOW 26
Research in Motion (RIM) BlackBerry Enterprise Server 4.1 SP2 before Hotfix 1 for IBM Lotus Domino might allow attackers with meeting organizer privileges to cause a denial of service (application hang) via a deleted rec…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01476 · Published 2006-10-25 · No fix listed
Priority LOW 24
Cross-site scripting (XSS) vulnerability in webdesktop/app in the BlackBerry Web Desktop Manager component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software before 5.0.2 MR5 and 5.0.3 before MR1, an…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01931 · Published 2011-04-18 · No fix listed CWE-79