IF
Vendor
Ifax
4
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-1782 | HY Hylafax Ifax | 9.9 | Apr 14 | In HylaFAX Enterprise Web Interface and AvantFAX, the language form element is not properly sanitized before being used and can be misused to include an arbitrary file in the … |
| CVE-2020-15397 | HE Hylafax Enterprise Ifax | 7.8 | Jun 30 | HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are… |
| CVE-2020-15396 | HE Hylafax Enterprise Ifax | 7.8 | Jun 30 | In HylaFAX+ through 7.0.2 and HylaFAX Enterprise, the faxsetup utility calls chown on files in user-owned directories |
| CVE-2020-11766 | HY Hylafax Ifax | 8.8 | May 19 | sendfax.php in iFAX AvantFAX before 3.3.6 and HylaFAX Enterprise Web Interface before 0.2.5 allows authenticated Command Injection |