Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

47 records

Vendor: HGiga Clear all filters
TI-2026-62990 CVE-2026-93468 · GHSA-3q98-96r7-4g5v

HGiga｜OAKlouds - Arbitrary File Read

Priority MEDIUM 45

The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00676 Published 2026-09-18 Fixed in 107 CWE-23
TI-2026-62989 CVE-2026-93467 · GHSA-7qh3-jh73-mv66

HGiga｜OAKlouds - Insecure Deserialization

Priority MEDIUM 50

The OAKlouds developed by HGiga has a Insecure Deserialization vulnerability.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00914 Published 2026-09-18 Fixed in 26 CWE-502
TI-2026-05570 CVE-2026-6349 · GHSA-hx2j-xhcm-gv72

HGiga｜iSherlock - OS Command Injection

Priority MEDIUM 52

The iSherlock developed by HGiga has an OS Command Injection vulnerability, allowing unauthenticated local attackers to inject arbitrary OS commands and execute them on the server.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02029 Published 2026-04-16 Fixed in 476, 261 CWE-78
TI-2026-01883 CVE-2026-2236 · GHSA-fh65-38cq-5m3r

HGiga｜C&Cm@il - SQL Injection

Priority MEDIUM 44

C&Cm@il developed by HGiga has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00487 Published 2026-02-09 Fixed in 7.0-978 CWE-89
TI-2026-01882 CVE-2026-2235 · GHSA-h273-w39h-f6xm

HGiga｜C&Cm@il - SQL Injection

Priority LOW 31

C&Cm@il developed by HGiga has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00324 Published 2026-02-09 Fixed in 7.0-978 CWE-89
TI-2026-01881 CVE-2026-2234 · GHSA-x737-7v9v-f6g5

HGiga｜C&Cm@il - Missing Authentication

Priority MEDIUM 49

C&Cm@il developed by HGiga has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read and modify any user's mail content.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00514 Published 2026-02-09 Fixed in 7.0-978 CWE-306
TI-2025-10911 CVE-2025-11900 · GHSA-9hmp-7p86-546r

HGiga｜iSherlock - OS Command Injection

Priority MEDIUM 52

The iSherlock developed by HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01753 Published 2025-10-17 Fixed in 774, 440 CWE-78
TI-2025-06789 CVE-2025-7451 · GHSA-8w6v-23cx-qj29

Hgiga｜iSherlock - OS Command Injection

Priority MEDIUM 51

The iSherlock developed by Hgiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01418 Published 2025-07-14 Fixed in 137, 732 CWE-78
TI-2025-02951 CVE-2025-3364 · GHSA-g6qm-rq8x-47vj

HGiga PowerStation - Chroot Escape

Priority LOW 31

The SSH service of PowerStation from HGiga has a Chroot Escape vulnerability, allowing attackers with root privileges to bypass chroot restrictions and access the entire file system.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00191 Published 2025-04-08 Fixed in x64.6.2.213 CWE-250
TI-2025-02950 CVE-2025-3363 · GHSA-q23q-4mrr-rg29

HGiga iSherlock - OS Command Injection

Priority MEDIUM 52

The web service of iSherlock from HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01364 Published 2025-04-08 Fixed in 236 CWE-78
TI-2025-02949 CVE-2025-3362 · GHSA-x57p-29rm-hwfg

HGiga iSherlock - OS Command Injection

Priority MEDIUM 52

The web service of iSherlock from HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01364 Published 2025-04-08 Fixed in 236 CWE-78
TI-2025-02948 CVE-2025-3361 · GHSA-gh5j-5f8x-j85c

HGiga iSherlock - OS Command Injection

Priority MEDIUM 52

The web service of iSherlock from HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01364 Published 2025-04-08 Fixed in 236 CWE-78
TI-2025-01883 CVE-2025-2150 · GHSA-r5j3-c4vg-xf85

HGiga C&Cm@il - Stored Cross-Site Scripting

Priority LOW 24

The C&Cm@il from HGiga has a Stored Cross-Site Scripting (XSS) vulnerability, allowing remote attackers with regular privileges to send emails containing malicious JavaScript code, which will be executed in the recipient…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00263 Published 2025-03-10 Fixed in 1.0-238 CWE-79
TI-2024-09208 CVE-2024-9924 · GHSA-mr42-8xpc-qj99

Hgiga OAKlouds - Arbitrary File Read And Delete

Priority MEDIUM 50

The fix for CVE-2024-26261 was incomplete, and and the specific package for OAKlouds from Hgiga remains at risk.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00827 Published 2024-10-14 Fixed in 1162 CWE-36
TI-2024-04002 CVE-2024-4299 · GHSA-wgx8-xhfh-5ph4

HGiga iSherlock - Command Injection

Priority LOW 38

The system configuration interface of HGiga iSherlock (including MailSherlock, SpamSherock, AuditSherlock) fails to filter special characters in certain function parameters, allowing remote attackers with administrative…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02087 Published 2024-04-29 Fixed in 147 CWE-78
TI-2024-04001 CVE-2024-4298 · GHSA-8mvv-2pq8-4996

HGiga iSherlock - Command Injection

Priority LOW 38

The email search interface of HGiga iSherlock (including MailSherlock, SpamSherock, AuditSherlock) fails to filter special characters in certain function parameters, allowing remote attackers with administrative privileg…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02087 Published 2024-04-29 Fixed in 188 CWE-78
TI-2024-04000 CVE-2024-4297 · GHSA-29q2-fp4w-f7hm

HGiga iSherlock - Arbitrary File Download

Priority LOW 24

The system configuration interface of HGiga iSherlock (including MailSherlock, SpamSherlock, AuditSherlock) fails to filter special characters in certain function parameters, allowing remote attackers with administrative…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00674 Published 2024-04-29 Fixed in 147 CWE-22
TI-2024-03999 CVE-2024-4296 · GHSA-4mp7-6gp5-x248

HGiga iSherlock - Arbitrary File Download

Priority LOW 26

The account management interface of HGiga iSherlock (including MailSherlock, SpamSherlock, AuditSherlock) fails to filter special characters in certain function parameters, allowing remote attackers with administrative p…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00674 Published 2024-04-29 Fixed in 149 CWE-22
TI-2024-17346 CVE-2024-26261 · GHSA-5qm7-5w7x-5mcg

Hgiga OAKlouds - Arbitrary File Read And Delete

Priority MEDIUM 50

The functionality for file download in HGiga OAKlouds' certain modules contains an Arbitrary File Read and Delete vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00679 Published 2024-02-15 Fixed in 188, 1051 CWE-22
TI-2024-17345 CVE-2024-26260 · GHSA-hvxg-wm6p-c93r

Hgiga OAKlouds - Command Injection

Priority MEDIUM 52

The functionality for synchronization in HGiga OAKlouds' certain moudules has an OS Command Injection vulnerability, allowing remote attackers to inject system commands within specific request parameters.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01603 Published 2024-02-15 Fixed in 188, 1051 CWE-78
TI-2023-18922 CVE-2023-37292 · GHSA-h962-83vh-m65j

HGiga iSherlock - Command Injection

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in HGiga iSherlock 4.5 (iSherlock-user modules), HGiga iSherlock 5.5 (iSherlock-user modules) allows OS Command Inj…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01318 Published 2023-07-21 Fixed in iSherlock-user-4.5-174, iSherlock-user-5.5-174 CWE-78
TI-2023-11163 CVE-2023-25909 · GHSA-5wfp-vx7w-jx9r

HGiga Inc. OAKlouds - Arbitrary File Upload

Priority MEDIUM 51

HGiga OAKlouds file uploading function does not restrict upload of file with dangerous type.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00942 Published 2023-03-27 No fix listed CWE-434
TI-2023-10342 CVE-2023-24842 · GHSA-775x-85h4-43cp

HGiga MailSherlock - Broken Access Control

Priority LOW 31

HGiga MailSherlock has vulnerability of insufficient access control.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00595 Published 2023-03-27 No fix listed CWE-639
TI-2023-10341 CVE-2023-24841 · GHSA-6xj9-g6q5-f8xc

HGiga MailSherlock - Command Injection

Priority LOW 35

HGiga MailSherlock query function for connection log has a vulnerability of insufficient filtering for user input.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00928 Published 2023-03-27 No fix listed CWE-78
TI-2023-10340 CVE-2023-24840 · GHSA-98vq-g327-7379

HGiga MailSherlock - SQL Injection

Priority LOW 35

HGiga MailSherlock mail query function has vulnerability of insufficient validation for user input.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00928 Published 2023-03-27 No fix listed CWE-89
Load more