Threat database

5 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.8	KEVEPSS 17%	CVE-2010-4345Exim · Exim Privilege Escalation Vulnerability High7.8KEVEPSS 17%2022-03-25CISA KEVCVE-2010-4345 CVE-2010-4345 is a privilege escalation vulnerability in Exim that allows local users to gain elevated privileges by exploiting the ability of the exim user account to specify an alternate configuration file containing directives with arbitrary commands. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 17%Vulnerability #exploited-in-the-wild	CISA KEV	2022-03-25
Critical	9.8	KEVEPSS 71%	CVE-2010-4344Exim · Exim Heap-Based Buffer Overflow Vulnerability Critical9.8KEVEPSS 71%2022-03-25CISA KEVCVE-2010-4344 CVE-2010-4344 is a heap-based buffer overflow vulnerability in the string_vformat function of Exim mail transfer agent versions before 4.70. This flaw allows remote attackers to execute arbitrary code during an SMTP session. The vulnerability has been exploited in the wild, indicating active threat usage. No explicit patch links are provided in the input data, and affected versions are not specifically enumerated beyond 'before 4.70'. KEVEPSS 71%Vulnerability #exploited-in-the-wild	CISA KEV	2022-03-25
Critical	9.8	KEVEPSS 41%	CVE-2019-16928Exim Internet Mailer · Exim Out-of-bounds Write Vulnerability Critical9.8KEVEPSS 41%2022-03-03CISA KEVCVE-2019-16928 CVE-2019-16928 is an out-of-bounds write vulnerability in the Exim Internet Mailer that can lead to remote code execution. This vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data. KEVEPSS 41%Vulnerability Exim #exploited-in-the-wild	CISA KEV	2022-03-03
Critical	9.0	KEVEPSS 99%	CVE-2019-10149Mail Transfer Agent (MTA) · Exim Mail Transfer Agent (MTA) Improper Input Validation Critical9.0KEVEPSS 99%2022-01-10CISA KEVCVE-2019-10149 CVE-2019-10149 is a high severity vulnerability in the Exim Mail Transfer Agent (MTA) involving improper validation of recipient addresses in the deliver_message() function. This flaw can lead to remote command execution by an attacker. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data. KEVEPSS 99%Vulnerability Exim #exploited-in-the-wild	CISA KEV	2022-01-10
Critical	9.8	KEVEPSS 82%	CVE-2018-6789Exim · Exim Buffer Overflow Vulnerability Critical9.8KEVEPSS 82%2021-11-03CISA KEVCVE-2018-6789 CVE-2018-6789 is a high-severity buffer overflow vulnerability in the Exim mail transfer agent's base64d function within the SMTP listener. This flaw may allow remote code execution. It has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data. KEVEPSS 82%Vulnerability #exploited-in-the-wild	CISA KEV	2021-11-03

Showing 1–5 of 5 results