Approved changes feed: RSS · Atom

cpe:2.3:a:hgiga:isherlock_5.5:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHgiga (3395f64f-c7c9-5c57-a478-cf9fa807fa6c)
ProductIsherlock 5.5 (46e77ce9-a40d-5147-84fc-76fe478b6783)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3363 vulnerable 2026-06-08 07:23:08.740027 HGiga iSherlock - OS Command Injection
CRITICAL (9.8)
The web service of iSherlock from HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server.
Published: 2025-04-08T02:11:48.241Z
Updated: 2025-04-08T14:19:12.551Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3362 vulnerable 2026-06-08 07:23:08.739687 HGiga iSherlock - OS Command Injection
CRITICAL (9.8)
The web service of iSherlock from HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server.
Published: 2025-04-08T02:03:34.585Z
Updated: 2025-04-08T14:51:59.807Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3361 vulnerable 2026-06-08 07:23:08.739133 HGiga iSherlock - OS Command Injection
CRITICAL (9.8)
The web service of iSherlock from HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server.
Published: 2025-04-08T02:00:12.620Z
Updated: 2025-04-08T15:59:50.067Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11900 vulnerable 2026-06-08 07:04:29.374735 HGiga|iSherlock - OS Command Injection
CRITICAL (9.8)
The iSherlock developed by HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server.
Published: 2025-10-17T03:50:44.524Z
Updated: 2025-10-17T14:25:15.078Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4299 vulnerable 2026-06-08 06:50:17.458341 HGiga iSherlock - Command Injection
HIGH (7.2)
The system configuration interface of HGiga iSherlock (including MailSherlock, SpamSherock, AuditSherlock) fails to filter special characters in certain function parameters, allowing remote attackers with administrative privileges to exploit this vulnerability for Command Injection attacks, enabling execution of arbitrary system commands.
Published: 2024-04-29T03:15:18.038Z
Updated: 2025-07-14T02:21:35.775Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4298 vulnerable 2026-06-08 06:50:17.457656 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4297 vulnerable 2026-06-08 06:50:17.455854 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4296 vulnerable 2026-06-08 06:50:17.454686 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37292 vulnerable 2026-06-08 06:08:15.092645 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.