Skip to main content

Ssr45 Isherlock User

8 CVEs product

Monthly

CVE-2021-22848 CRITICAL Act Now

HGiga MailSherlock contains a SQL Injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SQLi Msr45 Isherlock Antispam Msr45 Isherlock User Ssr45 Isherlock Antispam Ssr45 Isherlock User
NVD
CVSS 3.1
9.8
EPSS
1.0%
CVE-2020-35851 CRITICAL Act Now

HGiga MailSherlock does not validate specific parameters properly. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Msr45 Isherlock User Ssr45 Isherlock User
NVD
CVSS 3.1
9.8
EPSS
1.7%
CVE-2020-35743 HIGH This Week

HGiga MailSherlock contains a SQL injection flaw. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi Msr45 Isherlock Antispam Msr45 Isherlock User Ssr45 Isherlock Antispam Ssr45 Isherlock User
NVD
CVSS 3.1
7.6
EPSS
0.6%
CVE-2020-35742 HIGH This Week

HGiga MailSherlock contains a vulnerability of SQL Injection. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi Msr45 Isherlock Antispam Msr45 Isherlock User Ssr45 Isherlock Antispam Ssr45 Isherlock User
NVD
CVSS 3.1
7.6
EPSS
0.6%
CVE-2020-35741 MEDIUM This Month

HGiga MailSherlock does not validate user parameters on multiple login pages. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Msr45 Isherlock Antispam Msr45 Isherlock User Ssr45 Isherlock Antispam Ssr45 Isherlock User
NVD
CVSS 3.1
6.1
EPSS
0.6%
CVE-2020-35740 MEDIUM This Month

HGiga MailSherlock does not validate specific URL parameters properly that allows attackers to inject JavaScript syntax for XSS attacks. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Msr45 Isherlock Antispam Msr45 Isherlock User Ssr45 Isherlock Antispam Ssr45 Isherlock User
NVD
CVSS 3.1
6.1
EPSS
0.6%
CVE-2020-25850 HIGH This Week

The function, view the source code, of HGiga MailSherlock does not validate specific characters. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Msr45 Isherlock User Ssr45 Isherlock User
NVD
CVSS 3.1
7.5
EPSS
1.1%
CVE-2020-25848 CRITICAL Act Now

HGiga MailSherlock contains weak authentication flaw that attackers grant privilege remotely with default password generation mechanism. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Msr45 Isherlock Antispam Msr45 Isherlock Audit Msr45 Isherlock Base Msr45 Isherlock User +6
NVD
CVSS 3.1
9.8
EPSS
1.7%
EPSS 1% CVSS 9.8
CRITICAL Act Now

HGiga MailSherlock contains a SQL Injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SQLi Msr45 Isherlock Antispam Msr45 Isherlock User +2
NVD
EPSS 2% CVSS 9.8
CRITICAL Act Now

HGiga MailSherlock does not validate specific parameters properly. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Msr45 Isherlock User Ssr45 Isherlock User
NVD
EPSS 1% CVSS 7.6
HIGH This Week

HGiga MailSherlock contains a SQL injection flaw. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi Msr45 Isherlock Antispam Msr45 Isherlock User +2
NVD
EPSS 1% CVSS 7.6
HIGH This Week

HGiga MailSherlock contains a vulnerability of SQL Injection. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi Msr45 Isherlock Antispam Msr45 Isherlock User +2
NVD
EPSS 1% CVSS 6.1
MEDIUM This Month

HGiga MailSherlock does not validate user parameters on multiple login pages. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Msr45 Isherlock Antispam Msr45 Isherlock User +2
NVD
EPSS 1% CVSS 6.1
MEDIUM This Month

HGiga MailSherlock does not validate specific URL parameters properly that allows attackers to inject JavaScript syntax for XSS attacks. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Msr45 Isherlock Antispam Msr45 Isherlock User +2
NVD
EPSS 1% CVSS 7.5
HIGH This Week

The function, view the source code, of HGiga MailSherlock does not validate specific characters. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Msr45 Isherlock User Ssr45 Isherlock User
NVD
EPSS 2% CVSS 9.8
CRITICAL Act Now

HGiga MailSherlock contains weak authentication flaw that attackers grant privilege remotely with default password generation mechanism. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Msr45 Isherlock Antispam Msr45 Isherlock Audit +8
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy