Login Request a demo
GF
Vendor
GFI
11 products with CVEs on record
56
CVEs
0
On KEV
0
New 30D
Products
MA
MailEssentials
GFI
8.8
22 CVEs0 on KEV0 new
AR
Archiver
GFI
9.8
9 CVEs0 on KEV0 new
HE
Helpdesk
Gfi
5.4
5 CVEs0 on KEV0 new
KC
Kerio Connect
Gfi
8.8
5 CVEs0 on KEV0 new
KC
Kerio Control
GFI
9.8
5 CVEs0 on KEV0 new
KE
KerioConnect
GFI
5.4
3 CVEs0 on KEV0 new
MA
Mailsecurity
Gfi
–
3 CVEs0 on KEV0 new
GB
Gfi Backup 2009
Gfi
–
1 CVEs0 on KEV0 new
KC
Kerio Connect Client
Gfi
6.5
1 CVEs0 on KEV0 new
LN
Languard Network Security Scanner
Gfi
–
1 CVEs0 on KEV0 new
VA
Vipre Antivirus
Gfi
7.0
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-23753
HE
Helpdesk
Gfi
4.8
0%
Apr 20GFI HelpDesk < 4.99.9 Stored XSS via charset Parameter
CVE-2026-23752
HE
Helpdesk
Gfi
4.8
0%
Apr 20GFI HelpDesk < 4.99.9 Stored XSS via companyname Parameter
CVE-2026-23756
HE
Helpdesk
Gfi
5.4
0%
Apr 20GFI HelpDesk < 4.99.9 Stored XSS via Troubleshooter Step Subject
CVE-2026-23758
HE
Helpdesk
Gfi
5.4
0%
Apr 20GFI HelpDesk < 4.99.9 Stored XSS via editsubject Parameter
CVE-2026-23757
HE
Helpdesk
Gfi
5.4
0%
Apr 20GFI HelpDesk < 4.99.10 Stored XSS via Reports Module
CVE-2026-2039
AR
Archiver
GFI
9.8
1%
Feb 20GFI Archiver MArc.Store Missing Authorization Authentication Bypass Vulnerability
CVE-2026-2036
AR
Archiver
GFI
8.8
1%
Feb 20GFI Archiver MArc.Store Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVE-2026-2038
AR
Archiver
GFI
9.8
1%
Feb 20GFI Archiver MArc.Core Missing Authorization Authentication Bypass Vulnerability
CVE-2026-2037
AR
Archiver
GFI
8.8
1%
Feb 20GFI Archiver MArc.Core Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVE-2026-23621
MA
Mailessentials
Gfi
4.3
0%
Feb 19GFI MailEssentials AI < 22.4 ListServer.IsPathExist() Absolute Directory Traversal to File Enumeration
CVE-2026-23620
MA
Mailessentials
Gfi
4.3
0%
Feb 19GFI MailEssentials AI < 22.4 ListServer.IsDBExist() Absolute Directory Traversal to File Enumeration
CVE-2026-23619
MA
Mailessentials
Gfi
5.4
0%
Feb 19GFI MailEssentials AI < 22.4 General Settings Local Domains Domain Description Stored XSS
CVE-2026-23618
MA
Mailessentials
Gfi
5.4
0%
Feb 19GFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Subject Condition Stored XSS
CVE-2026-23617
MA
Mailessentials
Gfi
5.4
0%
Feb 19GFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Body Condition Stored XSS
CVE-2026-23616
MA
Mailessentials
Gfi
5.4
0%
Feb 19GFI MailEssentials AI < 22.4 Anti-Spam Anti-Spoofing Description Stored XSS
CVE-2026-23615
MA
Mailessentials
Gfi
5.4
0%
Feb 19GFI MailEssentials AI < 22.4 Anti-Spam Sender Policy Framework Email Exceptions Description Stored XSS
CVE-2026-23614
MA
Mailessentials
Gfi
5.4
0%
Feb 19GFI MailEssentials AI < 22.4 Anti-Spam Sender Policy Framework IP Exceptions Description Stored XSS
CVE-2026-23613
MA
Mailessentials
Gfi
5.4
0%
Feb 19GFI MailEssentials AI < 22.4 Anti-Spam URI DNS Blocklist Domain Stored XSS
CVE-2026-23612
MA
Mailessentials
Gfi
5.4
0%
Feb 19GFI MailEssentials AI < 22.4 Anti-Spam IP DNS Blocklist Domain Stored XSS
CVE-2026-23611
MA
Mailessentials
Gfi
5.4
0%
Feb 19GFI MailEssentials AI < 22.4 Anti-Spam IP Blocklist Description Stored XSS
CVE-2026-23610
MA
Mailessentials
Gfi
5.4
0%
Feb 19GFI MailEssentials AI < 22.4 POP2Exchange POP3 Server Login Stored XSS
CVE-2026-23609
MA
Mailessentials
Gfi
5.4
0%
Feb 19GFI MailEssentials AI < 22.4 General Settings Perimeter SMTP Servers Description Stored XSS
CVE-2026-23608
MA
Mailessentials
Gfi
5.4
0%
Feb 19GFI MailEssentials AI < 22.4 Email Management Mail Monitoring Rule Stored XSS
CVE-2026-23607
MA
Mailessentials
Gfi
5.4
0%
Feb 19GFI MailEssentials AI < 22.4 Anti-Spam Whitelist Description Stored XSS
CVE-2026-23606
MA
Mailessentials
Gfi
5.4
0%
Feb 19GFI MailEssentials AI < 22.4 Advanced Content Filtering Rule Stored XSS
CVE-2026-23605
MA
Mailessentials
Gfi
5.4
0%
Feb 19GFI MailEssentials AI < 22.4 Attachment Filtering Rule Stored XSS
CVE-2026-23604
MA
Mailessentials
Gfi
5.4
0%
Feb 19GFI MailEssentials AI < 22.4 Keyword Filtering Rule Stored XSS
CVE-2025-34071
KC
Kerio Control
Gfi
9.8
1%
Jul 2GFI Kerio Control Unsigned System Image Upload Root Code Execution
CVE-2025-34070
KC
Kerio Control
Gfi
9.8
1%
Jul 2GFI Kerio Control GFIAgent Missing Authentication on Administrative Interfaces
CVE-2025-34069
KC
Kerio Control
Gfi
9.8
1%
Jul 2GFI Kerio Control GFIAgent Authentication Bypass via Proxy Forwarding
CVE-2025-35940
AR
Archiver
GFI
8.1
0%
Jun 10Hard-coded ArchiverSpaApi JWT Signing Key
CVE-2025-34491
MA
MailEssentials
GFI
8.8
1%
Apr 28GFI MailEssentials < 21.8 MultiNode Insecure Deserialization
CVE-2025-34490
MA
MailEssentials
GFI
6.5
1%
Apr 28GFI MailEssentials < 21.8 XXE Arbitrary File Read
CVE-2025-34489
MA
MailEssentials
GFI
7.8
0%
Apr 28GFI MailEssentials < 21.8 Local Privilege Escalation
CVE-2025-2977
KE
KerioConnect
GFI
5.4
0%
Mar 31GFI KerioConnect PDF File cross site scripting
CVE-2025-2976
KE
KerioConnect
GFI
5.4
0%
Mar 31GFI KerioConnect File Upload cross site scripting
CVE-2025-2975
KE
KerioConnect
GFI
5.4
0%
Mar 31GFI KerioConnect Signature EditHtmlSource cross site scripting
CVE-2024-52875
KC
Kerio Control
GFI
8.8
30%
Jan 31An issue was discovered in GFI Kerio Control 9.2.5 through 9.4.5
CVE-2024-11949
AR
Archiver
GFI
8.8
1%
Dec 11GFI Archiver Store Service Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVE-2024-11948
AR
Archiver
GFI
9.8
1%
Dec 11GFI Archiver Telerik Web UI Remote Code Execution Vulnerability
CVE-2024-11947
AR
Archiver
GFI
8.8
1%
Dec 11GFI Archiver Core Service Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVE-2023-25267
KC
Kerio Connect
Gfi
8.8
1%
Mar 15An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 (fixed in 10.0.0)
CVE-2021-29281
AR
Archiver
Gfi
9.8
3%
Jul 7File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik Web UI plugin which is affected by CVE-2014-2217, and…
CVE-2019-16414
KC
Kerio Control
Gfi
6.1
2%
Sep 30A DOM based XSS in GFI Kerio Control v9.3.0 allows embedding of malicious code and manipulating the login page to send back a victim's cleartext credentials to an attacker via a…
CVE-2017-7440
KC
Kerio Connect Client
Gfi
6.5
1%
May 2Kerio Connect 8.0.0 through 9.2.2, and Kerio Connect Client desktop application for Windows and Mac 9.2.0 through 9.2.2, when e-mail preview is enabled, allows remote attackers to…
CVE-2010-5254
GB
Gfi Backup 2009
Gfi
–
0%
Sep 7Untrusted search path vulnerability in GFI Backup 3.1 Build 20100730 2009 Home Edition allows local users to gain privileges via a Trojan horse ArmAccess.dll file in the current…
CVE-2010-5181
VA
Vipre Antivirus
Gfi
7.0
0%
Aug 25Race condition in VIPRE Antivirus Premium 4.0.3272 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked…
CVE-2005-3182
MA
Mailsecurity
Gfi
–
4%
Oct 20Buffer overflow in the HTTP management interface for GFI MailSecurity 8.1 allows remote attackers to execute arbitrary code via long headers such as (1) Host and (2) Accept in…
CVE-2005-0604
LN
Languard Network Security Scanner
Gfi
–
0%
May 2lnss.exe in GFI Languard Network Security Scanner 5.0 stores the username and password in memory in plaintext, which could allow local administrators to obtain domain…
CVE-2004-1312
MA
Mailessentials
Gfi
–
2%
Jan 3A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote attackers to cause a denial of service via certain strings,…
CVE-2002-1121
MA
Mailsecurity
Gfi
–
7%
Sep 24SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of…