Synck

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Synck records in CISA KEV

No Synck vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mailform Pro Cgi 3 records MEDIUM

Records

3 records in Mailform Pro Cgi · all components

TI-2023-15891 CVE-2023-32610 · GHSA-rf8j-95h8-vrrr

Regular expression denial of service in SYNCK GRAPHICA Mailform Pro CGI

MEDIUM 41

Mailform Pro CGI 4.3.1.2 and earlier allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01253 Published 2023-06-29 No fix listed CWE-1333

TI-2022-18025 CVE-2022-38400 · GHSA-qq5j-v6jh-6xgc

Information disclosure in SYNCK GRAPHICA Mailform Pro CGI

LOW 30

Mailform Pro CGI 4.3.1 and earlier allow a remote unauthenticated attacker to obtain the user input data by having a use of the product to access a specially crafted URL.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0156 Published 2022-09-08 No fix listed CWE-200

TI-2025-27602 CVE-2025-41441 · GHSA-fwqm-5j5w-xq87

Information disclosure through error messages in SYNCK GRAPHICA Mailform Pro CGI

LOW 28

Mailform Pro CGI prior to 4.3.4 generates error messages containing sensitive information, which may allow a remote unauthenticated attacker to obtain coupon codes.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00402 Published 2025-05-26 Fixed in 4.3.4 CWE-209

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0