CI
Vendor
Citadel
15
CVEs
0
On KEV
0
New 30D
Products
WE9.8
Webcit
Citadel
9 CVEs0 on KEV0 new
UX–
UX
Citadel
3 CVEs0 on KEV0 new
CI5.4
Citadel
Citadel
2 CVEs0 on KEV0 new
SM–
Smtp
Citadel
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-44272 | CI Citadel Citadel | 5.4 | Oct 4 | A cross-site scripting vulnerability exists in Citadel versions prior to 994 |
| CVE-2021-37845 | WE Webcit Citadel | 3.7 | May 29 | An issue was discovered in Citadel through webcit-932 |
| CVE-2020-29547 | WE Webcit Citadel | 5.9 | May 29 | An issue was discovered in Citadel through webcit-926 |
| CVE-2020-27742 | WE Webcit Citadel | 6.5 | Oct 28 | An Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows authenticated remote attackers to read someone else's emails via the msg_confirm_move… |
| CVE-2020-27741 | WE Webcit Citadel | 6.1 | Oct 28 | Multiple cross-site scripting (XSS) vulnerabilities in Citadel WebCit through 926 allow remote attackers to inject arbitrary web script or HTML via multiple pages and parameters |
| CVE-2020-27740 | WE Webcit Citadel | 5.3 | Oct 28 | Citadel WebCit through 926 allows unauthenticated remote attackers to enumerate valid users within the platform |
| CVE-2020-27739 | WE Webcit Citadel | 9.8 | Oct 28 | A Weak Session Management vulnerability in Citadel WebCit through 926 allows unauthenticated remote attackers to hijack recently logged-in users' sessions |
| CVE-2011-1756 | CI Citadel Citadel | – | Jun 21 | modules/xmpp/serv_xmpp.c in Citadel 7.86 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory… |
| CVE-2009-0364 | WE Webcit Citadel | – | Mar 26 | Format string vulnerability in the mini_calendar component in Citadel.org WebCit 7.22, and other versions before 7.39, allows remote attackers to execute arbitrary code via… |
| CVE-2008-0394 | SM Smtp Citadel | – | Jan 23 | Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RCPT TO command, which is not properly handled by the… |
| CVE-2007-3822 | WE Webcit Citadel | – | Jul 17 | Multiple cross-site scripting (XSS) vulnerabilities in Webcit before 7.11 allow remote attackers to inject arbitrary web script or HTML via (1) the who parameter to showuser; and… |
| CVE-2007-3821 | WE Webcit Citadel | – | Jul 17 | Cross-site request forgery (CSRF) vulnerability in Webcit before 7.11 allows remote attackers to modify configurations and perform other actions as arbitrary users via unspecified… |
| CVE-2004-1192 | UX UX Citadel | – | Jan 10 | Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via format string specifiers sent to the… |
| CVE-2004-1705 | UX UX Citadel | – | Jul 30 | Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of service via a long username |
| CVE-2002-0432 | UX UX Citadel | – | Jul 26 | Buffer overflow in (1) lprintf and (2) cprintf in sysdep.c of Citadel/UX 5.90 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute… |