Approved changes feed: RSS · Atom
cpe:2.3:a:netwin:surgemail:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Netwin (84440f9c-0c8f-54f6-a00b-4d1ca5722029) |
|---|---|
| Product | Surgemail (e002b59c-cf4b-5828-aa83-0fdab9b59443) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-11990 |
vulnerable | 2026-06-08 06:23:50.820975 |
Cross-Site Scripting (XSS) en SurgeMail de NetWin
MEDIUM (4.6)
A Cross-Site Scripting (XSS) vulnerability in SurgeMail v78c2 could allow an attacker to execute arbitrary JavaScript code via an elaborate payload injected into vulnerable parameters.
Published: 2024-11-29T13:00:57.502Z
Updated: 2024-11-29T13:25:05.049Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3201 |
vulnerable | 2026-06-08 04:55:13.636193 |
Details available
Cross-site scripting (XSS) vulnerability in NetWin Surgemail before 4.3g allows remote attackers to inject arbitrary web script or HTML via the username_ex parameter to the surgeweb program.
Published: 2011-01-07T22:00:00.000Z
Updated: 2024-08-07T03:03:18.689Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-2859 |
vulnerable | 2026-06-08 04:50:32.427564 |
Details available
Unspecified vulnerability in the IMAP service in NetWin SurgeMail before 3.9g2 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors related to an "imap command."
Published: 2008-06-25T10:00:00.000Z
Updated: 2024-08-07T09:14:14.899Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1498 |
vulnerable | 2026-06-08 04:50:20.805353 |
Details available
Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated users to execute arbitrary code via a long first argument to the LIST command.
Published: 2008-03-25T19:00:00.000Z
Updated: 2024-08-07T08:24:41.918Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1055 |
vulnerable | 2026-06-08 04:50:18.697139 |
Details available
Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earlier, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string specifiers in the page parameter.
Published: 2008-02-27T19:00:00.000Z
Updated: 2024-08-07T08:08:57.236Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-2548 |
vulnerable | 2026-06-08 04:48:10.141351 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to inject arbitrary web script or HTML via (a) a URI containing the script, or (b) the username field in the login form. NOTE: it is possible that the first attack vector is resultant from the error message issue (CVE-2004-2547).
Published: 2005-11-21T11:00:00.000Z
Updated: 2024-08-08T01:29:14.076Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.