Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Vendor: HGiga Component: Msr45 Isherlock-user Clear all filters
TI-2021-05709 CVE-2021-22848 · GHSA-3v2j-hfc3-mhfr

HGiga MailSherlock - SQL Injection-2

Priority MEDIUM 44

HGiga MailSherlock contains a SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0102 Published 2021-03-18 Fixed in 120, 133 CWE-89
TI-2020-18295 CVE-2020-35851 · GHSA-f62f-7p64-pmrv

HGiga MailSherlock - Command Injection

Priority MEDIUM 46

HGiga MailSherlock does not validate specific parameters properly.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01759 Published 2020-12-31 Fixed in 115 CWE-78
TI-2020-18199 CVE-2020-35743 · GHSA-p6jx-ww27-x6x5

HGiga MailSherlock - SQL Injection -3

Priority LOW 34

HGiga MailSherlock contains a SQL injection flaw.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00606 Published 2020-12-31 Fixed in 120, 133 CWE-89
TI-2020-18198 CVE-2020-35742 · GHSA-xfr6-j4fr-qr42

HGiga MailSherlock - SQL Injection -1

Priority LOW 34

HGiga MailSherlock contains a vulnerability of SQL Injection.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00606 Published 2020-12-31 Fixed in 120, 133 CWE-89
TI-2020-18197 CVE-2020-35741 · GHSA-6w7j-r535-gc2c

HGiga MailSherlock - XSS -2

Priority LOW 32

HGiga MailSherlock does not validate user parameters on multiple login pages.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00619 Published 2020-12-31 Fixed in 120, 133 CWE-79
TI-2020-18196 CVE-2020-35740 · GHSA-r2gc-8vh7-8256

HGiga MailSherlock - XSS -1

Priority LOW 32

HGiga MailSherlock does not validate specific URL parameters properly that allows attackers to inject JavaScript syntax for XSS attacks.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00619 Published 2020-12-31 Fixed in 120, 133 CWE-79
TI-2020-15841 CVE-2020-25850 · GHSA-wv77-666p-gm5q

HGiga MailSherlock - Arbitrary File Download

Priority LOW 37

The function, view the source code, of HGiga MailSherlock does not validate specific characters.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01121 Published 2020-12-31 Fixed in 117
TI-2020-15839 CVE-2020-25848 · GHSA-qf9m-hx8v-j382

HGiga MailSherlock - Broken Authentication

Priority MEDIUM 45

HGiga MailSherlock contains weak authentication flaw that attackers grant privilege remotely with default password generation mechanism.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01674 Published 2020-12-31 Fixed in 243, 114 +3 CWE-287