Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2020-18724

Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19.5.5 allows an attacker to executes code and perform a XSS attack while opening a contact list.

CVSS 3.1 · 5.4 Medium EPSS 3.2% KEV · Not listed
Vendors
Altn
Products
Mdaemon Webmail
CVE-2020-18723

Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code on the email recipient side while forwarding an email to perform potentially malicious activities.

CVSS 3.1 · 5.4 Medium EPSS 4.0% KEV · Not listed
Vendors
Altn
Products
Mdaemon Webmail