Rediff Bol Downloader ActiveX (OCX) control allows remote attackers to execute arbitrary files, and obtain sensitive information (usernames and pathnames), via a URL in the url vbscript parameter.
Search vulnerabilities
CVE-2006-6838
CVSS 2.0 · 7.5 High
EPSS 2.5%
KEV · Not listed
Vendors
Products
CVE-2007-1402
The Rediff Toolbar 2.0 ActiveX control in redifftoolbar.dll allows remote attackers to cause a denial of service via unspecified manipulations, possibly involving improper initialization or blank arguments.
CVSS 2.0 · 7.5 High
EPSS 2.4%
KEV · Not listed
Vendors
Products
CVE-2005-2858
The Fetch.FetchContact.1 ActiveX control (Fetch.dll) for Rediff Bol 7.0 allows remote attackers to read the Windows Address Book via the FullAddressBook method.
CVSS 2.0 · 5.0 Medium
EPSS 1.3%
KEV · Not listed
Vendors
Products
CVE-2019-11836
The Rediffmail (aka com.rediff.mail.and) application 2.2.6 for Android has cleartext mail content in file storage, persisting after a logout.
CVSS 3.0 · 4.6 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.