AL
Vendor
Altn
25
CVEs
0
On KEV
0
New 30D
Products
MD8.8
Mdaemon
Altn
11 CVEs0 on KEV0 new
SG9.8
Security Gateway For Email Servers
Altn
8 CVEs0 on KEV0 new
MW8.8
Mdaemon Webmail
Altn
3 CVEs0 on KEV0 new
ME7.5
Mdaemon Email Server
Altn
2 CVEs0 on KEV0 new
SE5.3
Securitygateway
Altn
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-37238 | SG Security Gateway For Email Servers Altn | 5.4 | Aug 25 | MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the currentRequest parameter |
| CVE-2022-37245 | SG Security Gateway For Email Servers Altn | 5.4 | Aug 25 | MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the Blacklist endpoint |
| CVE-2022-37244 | SG Security Gateway For Email Servers Altn | 5.4 | Aug 25 | MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRequest parameter |
| CVE-2022-37243 | SG Security Gateway For Email Servers Altn | 5.4 | Aug 25 | MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the whitelist endpoint |
| CVE-2022-37242 | SG Security Gateway For Email Servers Altn | 9.8 | Aug 25 | MDaemon Technologies SecurityGateway for Email Servers 8.5.2, is vulnerable to HTTP Response splitting via the data parameter |
| CVE-2022-37241 | SG Security Gateway For Email Servers Altn | 5.4 | Aug 25 | MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the data_leak_list_ajax endpoint |
| CVE-2022-37240 | SG Security Gateway For Email Servers Altn | 9.8 | Aug 25 | MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to HTTP Response splitting via the format parameter |
| CVE-2022-37239 | SG Security Gateway For Email Servers Altn | 5.4 | Aug 25 | MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the rulles_list_ajax endpoint |
| CVE-2022-29976 | MD Mdaemon Altn | 5.4 | May 11 | An Authenticated Reflected Cross-site scripting at BCC Parameter was discovered in MDaemon before 22.0.0 |
| CVE-2022-29975 | MD Mdaemon Altn | 5.4 | May 11 | An Authenticated Reflected Cross-site scripting at CC Parameter was discovered in MDaemon before 22.0.0 |
| CVE-2022-25356 | SE Securitygateway Altn | 5.3 | Apr 5 | Alt-N MDaemon Security Gateway through 8.5.0 allows SecurityGateway.dll?view=login XML Injection |
| CVE-2021-27183 | MD Mdaemon Altn | 7.2 | Apr 14 | An issue was discovered in MDaemon before 20.0.4 |
| CVE-2021-27182 | MD Mdaemon Altn | 8.8 | Apr 14 | An issue was discovered in MDaemon before 20.0.4 |
| CVE-2021-27181 | MD Mdaemon Altn | 8.8 | Apr 14 | An issue was discovered in MDaemon before 20.0.4 |
| CVE-2021-27180 | MD Mdaemon Altn | 6.1 | Apr 14 | An issue was discovered in MDaemon before 20.0.4 |
| CVE-2020-18724 | MW Mdaemon Webmail Altn | 5.4 | Feb 3 | Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19.5.5 allows an attacker to executes code and perform a XSS… |
| CVE-2020-18723 | MW Mdaemon Webmail Altn | 5.4 | Feb 3 | Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code on the email recipient side while forwarding an email to… |
| CVE-2019-19497 | ME Mdaemon Email Server Altn | 5.4 | Dec 17 | MDaemon Email Server 17.5.1 allows XSS via the filename of an attachment to an email message |
| CVE-2018-17792 | MW Mdaemon Webmail Altn | 8.8 | Jul 19 | MDaemon Webmail (formerly WorldClient) has CSRF |
| CVE-2019-13612 | ME Mdaemon Email Server Altn | 7.5 | Jul 16 | MDaemon Email Server 19 through 20.0.1 skips SpamAssassin checks by default for e-mail messages larger than 2 MB (and limits checks to 10 MB even with special configuration),… |
| CVE-2019-8983 | MD Mdaemon Altn | 6.1 | Feb 21 | MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 1 of 2) |
| CVE-2019-8984 | MD Mdaemon Altn | 6.1 | Feb 21 | MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 2 of 2) |
| CVE-2012-2584 | MD Mdaemon Altn | – | Aug 12 | Multiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1)… |
| CVE-2008-2631 | MD Mdaemon Altn | – | Jun 10 | The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted… |
| CVE-2008-1358 | MD Mdaemon Altn | – | Mar 17 | Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to execute arbitrary code via a FETCH command with a long BODY |