Neo

Debun Pop

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2018-0680

  • EPSS 1.02%
  • Veröffentlicht 15.11.2018 15:29:00
  • Zuletzt bearbeitet 21.11.2024 03:38:43

Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) uses hard-coded credentials, which may allow remote attackers to read/send mail or change the configuration.

9.8

CVE-2018-0681

  • EPSS 1.02%
  • Veröffentlicht 15.11.2018 15:29:00
  • Zuletzt bearbeitet 21.11.2024 03:38:43

Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) uses hard-coded credentials, which may allow remote attackers to login to the Management page and change the configuration.

9.8

CVE-2018-0682

  • EPSS 1.05%
  • Veröffentlicht 15.11.2018 15:29:00
  • Zuletzt bearbeitet 21.11.2024 03:38:44

Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) does not properly manage sessions, which allows remote attackers to read/send mail or change the configuration via unspecified vectors.

9.8

CVE-2018-0683

  • EPSS 5.9%
  • Veröffentlicht 15.11.2018 15:29:00
  • Zuletzt bearbeitet 21.11.2024 03:38:44

Buffer overflow in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) allows remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition via Cookie data.

9.8

CVE-2018-0684

  • EPSS 5.9%
  • Veröffentlicht 15.11.2018 15:29:00
  • Zuletzt bearbeitet 21.11.2024 03:38:44

Buffer overflow in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R3.0 and earlier, Denbun IMAP version V3.3I R3.0 and earlier) allows remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition via multipart/form-data ...

8.8

CVE-2018-0685

  • EPSS 0.76%
  • Veröffentlicht 15.11.2018 15:29:00
  • Zuletzt bearbeitet 21.11.2024 03:38:44

SQL injection vulnerability in the Denbun POP version V3.3P R4.0 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via HTTP requests for mail search.

8.8

CVE-2018-0686

  • EPSS 0.96%
  • Veröffentlicht 15.11.2018 15:29:00
  • Zuletzt bearbeitet 21.11.2024 03:38:44

Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) allows remote authenticated attackers to upload and execute any executable files via unspecified vectors.

6.1

CVE-2018-0687

  • EPSS 0.34%
  • Veröffentlicht 15.11.2018 15:29:00
  • Zuletzt bearbeitet 21.11.2024 03:38:44

Cross-site scripting vulnerability in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.