CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 20/10/2023 |
| CVE-2023-2228 | 보통6.8 | Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.1.0. | 21/04/2023 |
| CVE-2023-2227 | 심각9.1 | Improper Authorization in GitHub repository modoboa/modoboa prior to 2.1.0. | 21/04/2023 |
| CVE-2023-2160 | 심각9.8 | Weak Password Requirements in GitHub repository modoboa/modoboa prior to 2.1.0.
| 18/04/2023 |
| CVE-2023-0949 | 보통4.8 | Cross-site Scripting (XSS) - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5. | 22/02/2023 |
| CVE-2023-0860 | 높음7.5 | Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4. | 16/02/2023 |
| CVE-2023-0777 | 심각9.8 | Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4. | 10/02/2023 |
| CVE-2023-0519 | 보통5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4. | 26/01/2023 |
| CVE-2023-0470 | 보통5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4. | 26/01/2023 |
| CVE-2023-0438 | 보통6.5 | Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4. | 23/01/2023 |
| CVE-2023-0406 | 보통4.3 | Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4. | 19/01/2023 |
| CVE-2023-0398 | 보통6.5 | Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4. | 19/01/2023 |
| CVE-2019-19702 | 높음7.5 | The modoboa-dmarc plugin 1.1.0 for Modoboa is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this to perform a denial of service against the DMARC reporting functionality, such as by referencing the /dev/random file within XML documents that are ema | 10/12/2019 |