Vulnerability index

Browse CVEs

14 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Modoboa HIGH 7.2
CVE-2026-27602

Modoboa is a mail hosting and management platform. Prior to version 2.7.1, `exec_cmd()` in `modoboa/lib/sysutils.py` always runs subprocess calls wit…

Fix: 2.7.1+
Fix from $1,950 2026-03-25
Modoboa HIGH 8.8
CVE-2023-5690

Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.2.2.

Fix: 2.2.2+
Fix from $1,950 2023-10-20
Modoboa MEDIUM 5.4
CVE-2023-5688

Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.

Fix: 2.2.2+
Fix from $1,600 2023-10-20
Modoboa MEDIUM 5.4
CVE-2023-5689

Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.

Fix: 2.2.2+
Fix from $1,600 2023-10-20
Modoboa CRITICAL 9.1
CVE-2023-2227EPSS 44%

Improper Authorization in GitHub repository modoboa/modoboa prior to 2.1.0.

Fix: 2.1.0+
Fix from $2,300 2023-04-21
Modoboa MEDIUM 6.8
CVE-2023-2228

Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.1.0.

Fix: 2.1.0+
Fix from $1,600 2023-04-21
Modoboa CRITICAL 9.8
CVE-2023-2160

Weak Password Requirements in GitHub repository modoboa/modoboa prior to 2.1.0.

Fix: 2.1.0+
Fix from $2,300 2023-04-18
Installer HIGH 7.5
CVE-2023-0860

Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4.

Fix: 2.0.4+
Fix from $1,950 2023-02-16
Modoboa CRITICAL 9.8
CVE-2023-0777EPSS 15%

Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4.

Fix: 2.0.4+
Fix from $2,300 2023-02-10
Modoboa MEDIUM 5.4
CVE-2023-0519

Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4.

Fix: 2.0.4+
Fix from $1,600 2023-01-26
Modoboa MEDIUM 5.4
CVE-2023-0470

Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4.

Fix: 2.0.4+
Fix from $1,600 2023-01-26
Modoboa MEDIUM 6.5
CVE-2023-0438

Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.

Fix: 2.0.4+
Fix from $1,600 2023-01-23
Modoboa MEDIUM 6.5
CVE-2023-0398

Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.

Fix: 2.0.4+
Fix from $1,600 2023-01-19
Modoboa Dmarc HIGH 7.5
CVE-2019-19702

The modoboa-dmarc plugin 1.1.0 for Modoboa is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker…

No fix yet
Fix from $1,950 2019-12-10