Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
synacor vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2016-3408
Cross-site scripting (XSS) vulnerability in Zimbra Collaboration prior to 8.7.0 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, aka bug 101813.
Synacor Zimbra Collaboration Suite
4.3
CVSSv2
CVE-2016-3410
Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration prior to 8.7.0 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors, aka bugs 103956, 103995, 104475, 104838, and 104839.
Synacor Zimbra Collaboration Suite
4.3
CVSSv2
CVE-2016-3412
Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration prior to 8.7.0 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors, aka bugs 103997, 104413, 104414, 104777, and 104791.
Synacor Zimbra Collaboration Suite
4
CVSSv2
CVE-2016-3414
Unspecified vulnerability in Zimbra Collaboration prior to 8.6.0 Patch 7 allows remote authenticated users to affect availability via unknown vectors, aka bug 102029.
Synacor Zimbra Collaboration Suite
6.4
CVSSv2
CVE-2016-3415
Zimbra Collaboration prior to 8.7.0 allows remote malicious users to conduct deserialization attacks via unspecified vectors, aka bug 102276.
Synacor Zimbra Collaboration Suite
NA
CVE-2022-3569
Due to an issue with incorrect sudo permissions, Zimbra Collaboration Suite (ZCS) suffers from a local privilege escalation issue in versions 9.0.0 and prior, where the 'zimbra' user can effectively coerce postfix into running arbitrary commands as 'root'.
Synacor Zimbra Collaboration Suite
7.5
CVSSv2
CVE-2016-9924
Zimbra Collaboration Suite (ZCS) prior to 8.7.4 allows remote malicious users to conduct XML External Entity (XXE) attacks.
Synacor Zimbra Collaboration Suite
7.5
CVSSv2
CVE-2014-8563
Synacor Zimbra Collaboration prior to 8.0.9 allows plaintext command injection during STARTTLS.
Synacor Zimbra Collaboration Server
4.3
CVSSv2
CVE-2016-3409
Cross-site scripting (XSS) vulnerability in Zimbra Collaboration prior to 8.7.0 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, aka bug 102637.
Synacor Zimbra Collaboration Suite
4.3
CVSSv2
CVE-2016-3411
Cross-site scripting (XSS) vulnerability in Zimbra Collaboration prior to 8.7.0 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, aka bug 103609.
Synacor Zimbra Collaboration Suite
1 EDB exploit
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2021-35000
CVE-2024-4439
unauthorized
CVE-2024-0042
CVE-2024-31848
CVE-2023-40694
cache poisoning
CVE-2024-23707
firmware
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
NEXT »