Browse CVEs

HIGH 7.2 CVE-2025-53909 mailcow: dockerized is an open source groupware/email suite based on docker. A Server-Side Template Injection (SSTI) vulnerability exists in versions… Mailcow\ 2025-07+ Fix from $1,9502025-07-17 HIGH 8.8 CVE-2025-25198 mailcow: dockerized is an open source groupware/email suite based on docker. Prior to version 2025-01a, a vulnerability in mailcow's password reset f… Mailcow\ 2025-01a+ Fix from $1,9502025-02-12 HIGH 7.2 CVE-2024-41958 mailcow: dockerized is an open source groupware/email suite based on docker. A vulnerability has been discovered in the two-factor authentication (2F… Mailcow\ 2024-07+ Fix from $1,9502024-08-05 MEDIUM 6.1 CVE-2024-41959 mailcow: dockerized is an open source groupware/email suite based on docker. An unauthenticated attacker can inject a JavaScript payload into the API… Mailcow\ 2024-07+ Fix from $1,6002024-08-05 MEDIUM 6.2 CVE-2024-30270EPSS 27% mailcow: dockerized is an open source groupware/email suite based on docker. A security vulnerability has been identified in mailcow affecting versio… Mailcow\ 2024-04+ Fix from $1,6002024-04-04 MEDIUM 6.1 CVE-2024-31204EPSS 8% mailcow: dockerized is an open source groupware/email suite based on docker. A security vulnerability has been identified in mailcow affecting versio… Mailcow\ 2024-04+ Fix from $1,6002024-04-04 HIGH 7.3 CVE-2024-24760 mailcow is a dockerized email package, with multiple containers linked in one bridged network. A security vulnerability has been identified in mailco… Mailcow\ 2024-01c+ Fix from $1,9502024-02-02 MEDIUM 6.1 CVE-2023-49077 Mailcow: dockerized is an open source groupware/email suite based on docker. A Cross-Site Scripting (XSS) vulnerability has been identified within th… Mailcow\ 2023-11+ Fix from $1,6002023-11-30 HIGH 8.8 CVE-2023-34108 mailcow is a mail server suite based on Dovecot, Postfix and other open source software, that provides a modern web UI for user/server administration… Mailcow\ after 2023-05 Fix from $1,9502023-06-07 HIGH 8.8 CVE-2023-26490 mailcow is a dockerized email package, with multiple containers linked in one bridged network. The Sync Job feature - which can be made available to … Mailcow\ 2023-03+ Fix from $1,9502023-03-04 HIGH 8.2 CVE-2022-39258 mailcow is a mailserver suite. A vulnerability innversions prior to 2022-09 allows an attacker to craft a custom Swagger API template to spoof Author… Mailcow\ 2022-09+ Fix from $1,9502022-09-27 HIGH 8.8 CVE-2022-31138 mailcow is a mailserver suite. Prior to mailcow-dockerized version 2022-06a, an extended privilege vulnerability can be exploited by manipulating the… Mailcow\ 2022-06a+ Fix from $1,9502022-07-11 HIGH 8.8 CVE-2022-31245EPSS 5% mailcow before 2022-05d allows a remote authenticated user to inject OS commands and escalate privileges to domain admin via the --debug option in co… Mailcow\ 2022-05d+ Fix from $1,9502022-05-20 HIGH 8.8 CVE-2017-8928 mailcow 0.14, as used in "mailcow: dockerized" and other products, has CSRF. Mailcow\ Patch available Fix from $1,9502017-05-14