Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Isync Project Component: Isync Clear all filters
TI-2021-02599 CVE-2021-3657 · GHSA-gq8r-4g7c-69vw

Memory corruption in isync

Priority MEDIUM 48

A flaw was found in mbsync versions prior to 1.4.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03488 Published 2022-02-18 No fix listed CWE-119
TI-2021-02527 CVE-2021-3578 · GHSA-4r75-vj28-w5c7

Incorrect type conversion in isync

Priority LOW 36

A flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a malicious or compromised server to write an arbitrary integer value past the end of a heap-allocated structure by issuing an u…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01037 Published 2022-02-16 No fix listed CWE-704
TI-2013-00220 CVE-2013-0289 · GHSA-x9p3-334f-m7g8

Isync 0.4 before 1.0.6, does not verify that the server hostname matches a domain name in…

Priority LOW 23

Isync 0.4 before 1.0.6, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01326 Published 2014-05-23 No fix listed CWE-310