CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 20/10/2023 |
| CVE-2023-2228 | MITTEL6.8 | Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.1.0. | 21/04/2023 |
| CVE-2023-2227 | KRITISCH9.1 | Improper Authorization in GitHub repository modoboa/modoboa prior to 2.1.0. | 21/04/2023 |
| CVE-2023-2160 | KRITISCH9.8 | Weak Password Requirements in GitHub repository modoboa/modoboa prior to 2.1.0.
| 18/04/2023 |
| CVE-2023-0949 | MITTEL4.8 | Cross-site Scripting (XSS) - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5. | 22/02/2023 |
| CVE-2023-0860 | HOCH7.5 | Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4. | 16/02/2023 |
| CVE-2023-0777 | KRITISCH9.8 | Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4. | 10/02/2023 |
| CVE-2023-0519 | MITTEL5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4. | 26/01/2023 |
| CVE-2023-0470 | MITTEL5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4. | 26/01/2023 |
| CVE-2023-0438 | MITTEL6.5 | Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4. | 23/01/2023 |
| CVE-2023-0406 | MITTEL4.3 | Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4. | 19/01/2023 |
| CVE-2023-0398 | MITTEL6.5 | Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4. | 19/01/2023 |
| CVE-2019-19702 | HOCH7.5 | The modoboa-dmarc plugin 1.1.0 for Modoboa is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this to perform a denial of service against the DMARC reporting functionality, such as by referencing the /dev/random file within XML documents that are ema | 10/12/2019 |