Known vulnerabilities in MDaemon

Vendor: Alt-N
Software: MDaemon
Software CPE: cpe:2.3:a:alt-n:mdaemon:*:*:*:*:*:*:*:*
Total vulnerabilities: 20
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MDaemon MDaemon is affected by 20 known vulnerabilities: 2 high, 13 medium, 5 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109215 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-3929
CWE-79 High
No
No
25.0.2 15.05.2025 SB2025051561
#VU109214 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-11182
CWE-79 High
No
Exploited
24.5.2 15.05.2025 SB2025051560
#VU77307 - Cross-Site Request Forgery (CSRF)
CWE-352 Medium
No
No
18.0.6, 18.5.8, 19.0.8, 19.5.9, 20.0.6, 21.0.5, 21.5.3, 22.0.4, 23.0.1 14.06.2023 SB2023061433
#VU77306 - Improper input validation
CWE-20 Medium
No
No
18.0.6, 18.5.8, 19.0.8, 19.5.9, 20.0.6, 21.0.5, 21.5.3, 22.0.4, 23.0.1 14.06.2023 SB2023061433
#VU77304 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-27180
CWE-79 Medium
No
No
20.0.4 14.06.2023 SB2021042161
#VU77303 - Cross-Site Request Forgery (CSRF)
CVE-2021-27181
CWE-352 Medium
No
No
20.0.4 14.06.2023 SB2021042161
#VU77302 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2021-27182
CWE-74 Medium
No
No
20.0.4 14.06.2023 SB2021042161
#VU77301 - Unrestricted Upload of File with Dangerous Type
CVE-2021-27183
CWE-434 Low
No
No
20.0.4 14.06.2023 SB2021042161
#VU77300 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-29975
CWE-79 Low
No
No
22.0.0 14.06.2023 SB2022051748
#VU77298 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-29976
CWE-79 Low
No
No
22.0.0 14.06.2023 SB2022051748
#VU50659 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-18724
CWE-79 Medium
Available
No
20.0.1 12.02.2021 SB2021021202
#VU50658 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-18723
CWE-79 Medium
Available
No
20.0.1 12.02.2021 SB2021021202
#VU12775 - Cryptographic Issues
CWE-310 Low
No
No
- 17.05.2018 SB2018051701
#VU335 - Improper Access Control
CWE-284 Medium
No
No
- 20.08.2016 SB2012102501
#VU334 - Permissions, Privileges, and Access Controls
CWE-264 Medium
No
No
- 20.08.2016 SB2016070802
#VU32074 - Improper input validation
CVE-2016-5300
CWE-20 Medium
No
No
- 16.06.2016 SB2016061604
SB2017021720
SB2017011129
and 6 more
#VU33808 - Improper input validation
CVE-2015-1283
CWE-20 Medium
No
No
- 23.07.2015 SB2015072301
SB2016060802
SB2016060703
and 5 more
#VU43739 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-2584
CWE-79 Low
Available
No
- 12.08.2012 SB2012081201
#VU31844 - Out-of-bounds read
CVE-2009-3560
CWE-125 Medium
No
No
- 04.12.2009 SB2009120401
SB2010011701
SB2012092402
and 1 more
#VU31845 - Out-of-bounds read
CVE-2009-3720
CWE-125 Medium
No
No
- 03.11.2009 SB2009110301
SB2010011702
SB2012092402
and 2 more