Vulnerabilities

TI-2019-08872 CVE-2019-11836 · GHSA-54fp-gh3m-g9m6

The Rediffmail (aka com.rediff.mail.and) application 2.2.6 for Android has cleartext mail…

LOW 21

The Rediffmail (aka com.rediff.mail.and) application 2.2.6 for Android has cleartext mail content in file storage, persisting after a logout.

CVSS 3.0MEDIUM 4.6 Physical No auth No interaction EPSS 0.00303 Published 2019-05-09 No fix listed CWE-311

TI-2007-01344 CVE-2007-1402 · GHSA-4x3h-63mv-gmp8

The Rediff Toolbar 2.0 ActiveX control in redifftoolbar.dll allows remote attackers to…

LOW 37

The Rediff Toolbar 2.0 ActiveX control in redifftoolbar.dll allows remote attackers to cause a denial of service via unspecified manipulations, possibly involving improper initialization or blank arguments.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02388 Published 2007-03-10 No fix listed

TI-2006-06581 CVE-2006-6838 · GHSA-24x4-hpq6-x4j9

Rediff Bol Downloader ActiveX (OCX) control allows remote attackers to execute arbitrary…

LOW 38

Rediff Bol Downloader ActiveX (OCX) control allows remote attackers to execute arbitrary files, and obtain sensitive information (usernames and pathnames), via a URL in the url vbscript parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02508 Published 2007-01-03 No fix listed

Vulnerabilities

Filters

The Rediffmail (aka com.rediff.mail.and) application 2.2.6 for Android has cleartext mail…

The Rediff Toolbar 2.0 ActiveX control in redifftoolbar.dll allows remote attackers to…

Rediff Bol Downloader ActiveX (OCX) control allows remote attackers to execute arbitrary…