Approved changes feed: RSS · Atom

cpe:2.3:a:qbik:wingate:6.2.1:*:*:*:*:*:*:*

part: a version: 6.2.1 update: *

VendorQbik (72f3a2df-f43f-5d2f-81e2-0616f6f313ec)
ProductWingate (17b3ae9a-b4e5-5e6f-b907-2263b289a372)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-0802 vulnerable 2026-06-08 04:51:11.436540 Details available
Qbik WinGate, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.
Published: 2009-03-04T16:00:00.000Z
Updated: 2024-09-16T23:05:39.513Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3606 vulnerable 2026-06-08 04:50:35.603938 Details available
Heap-based buffer overflow in the IMAP service in Qbik WinGate 6.2.2.1137 and earlier allows remote authenticated users to cause a denial of service (resource exhaustion) or possibly execute arbitrary code via a long argument to the LIST command. NOTE: some of these details are obtained from third party information.
Published: 2008-08-12T19:00:00.000Z
Updated: 2024-08-07T09:45:18.943Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.