dbcve.org
Vulnerability index

Browse CVEs

13 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6649 Adobe 6383 Ibm 6266 Cisco 5746 Debian 3919 Apache 2864 Mozilla 2857 Redhat 2581
Citadel MEDIUM 5.4
CVE-2023-44272

A cross-site scripting vulnerability exists in Citadel versions prior to 994. When a malicious user sends an instant message with some JavaScript cod…

Fix: 994+
Fix from $1,600 2023-10-04
Webcit MEDIUM 5.9
CVE-2020-29547

An issue was discovered in Citadel through webcit-926. Meddler-in-the-middle attackers can pipeline commands after POP3 STLS, IMAP STARTTLS, or SMTP …

Fix: after 926
Fix from $1,600 2023-05-29
Webcit MEDIUM 6.5
CVE-2020-27742

An Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows authenticated remote attackers to read someone else's emails v…

Fix: after 926
Fix from $1,600 2020-10-28
Webcit CRITICAL 9.8
CVE-2020-27739

A Weak Session Management vulnerability in Citadel WebCit through 926 allows unauthenticated remote attackers to hijack recently logged-in users' ses…

Fix: after 926
Fix from $2,300 2020-10-28
Webcit MEDIUM 6.1
CVE-2020-27741

Multiple cross-site scripting (XSS) vulnerabilities in Citadel WebCit through 926 allow remote attackers to inject arbitrary web script or HTML via m…

Fix: after 926
Fix from $1,600 2020-10-28
Webcit MEDIUM 5.3
CVE-2020-27740

Citadel WebCit through 926 allows unauthenticated remote attackers to enumerate valid users within the platform. NOTE: this was reported to the vendo…

Fix: after 926
Fix from $1,600 2020-10-28
Citadel MEDIUM 5.0
CVE-2011-1756

modules/xmpp/serv_xmpp.c in Citadel 7.86 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cau…

Fix: after 7.86
Fix from $1,600 2011-06-21
Webcit HIGH 7.5
CVE-2009-0364

Format string vulnerability in the mini_calendar component in Citadel.org WebCit 7.22, and other versions before 7.39, allows remote attackers to exe…

Fix: after 7.38
Fix from $1,950 2009-03-26
Smtp HIGH 7.5
CVE-2008-0394EPSS 12%

Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RCPT TO command, which is not pr…

Fix: after 7.10
Fix from $1,950 2008-01-23
Webcit HIGH 7.5
CVE-2007-3821

Cross-site request forgery (CSRF) vulnerability in Webcit before 7.11 allows remote attackers to modify configurations and perform other actions as a…

Fix: after 7.10
Fix from $1,950 2007-07-17
Ux HIGH 10.0
CVE-2004-1192EPSS 12%

Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via format strin…

Mitigation only
Fix from $1,950 2005-01-10
Ux MEDIUM 5.0
CVE-2004-1705

Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of service via a long username.

Patch available
Fix from $1,600 2004-07-30
Ux HIGH 10.0
CVE-2002-0432EPSS 6%

Buffer overflow in (1) lprintf and (2) cprintf in sysdep.c of Citadel/UX 5.90 and earlier allows remote attackers to cause a denial of service (crash…

Fix: after 5.90
Fix from $1,950 2002-07-26