Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
synacor vulnerabilities and exploits
(subscribe to this query)
8.8
CVSSv3
CVE-2015-7610
Cross-site request forgery (CSRF) vulnerability in the login form in Zimbra Collaboration Suite (aka ZCS) prior to 8.6.0 Patch 10, 8.7.x prior to 8.7.11 Patch 2, and 8.8.x prior to 8.8.8 Patch 1 allows remote malicious users to hijack the authentication of unspecified victims by ...
Zimbra Zimbra Collaboration Suite 8.6.0
Synacor Zimbra Collaboration Suite 8.6.0
Synacor Zimbra Collaboration Suite
Synacor Zimbra Collaboration Suite 8.7.11
6.1
CVSSv3
CVE-2015-2230
Synacor Zimbra Collaboration Server 8.x prior to 8.7.0 has Reflected XSS in admin console.
Synacor Zimbra Collaboration Server
9.8
CVSSv3
CVE-2017-6813
A service provided by Zimbra Collaboration Suite (ZCS) prior to 8.7.6 fails to require needed privileges before performing a few requested operations.
Synacor Zimbra Collaboration Suite
9.8
CVSSv3
CVE-2017-6821
Directory traversal vulnerability in Zimbra Collaboration Suite (aka ZCS) prior to 8.7.6 allows malicious users to have unspecified impact via unknown vectors.
Synacor Zimbra Collaboration Suite
5.3
CVSSv3
CVE-2018-17938
Zimbra Collaboration prior to 8.8.10 GA allows text content spoofing via a loginErrorCode value.
Synacor Zimbra Collaboration Suite
6.5
CVSSv3
CVE-2016-3401
Unspecified vulnerability in Zimbra Collaboration prior to 8.7.0 allows remote authenticated users to affect integrity via unknown vectors, aka bug 99810.
Synacor Zimbra Collaboration Suite
7.5
CVSSv3
CVE-2016-3402
Unspecified vulnerability in Zimbra Collaboration prior to 8.7.0 allows remote malicious users to affect confidentiality via unknown vectors, aka bug 99167.
Synacor Zimbra Collaboration Suite
8.8
CVSSv3
CVE-2016-3406
Multiple cross-site request forgery (CSRF) vulnerabilities in Zimbra Collaboration prior to 8.7.0 allow remote malicious users to hijack the authentication of unspecified victims via vectors involving (1) the Client uploader extension or (2) extension REST handlers, aka bugs 1042...
Synacor Zimbra Collaboration Suite
6.1
CVSSv3
CVE-2016-3407
Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration prior to 8.7.0 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors, aka bugs 104222, 104910, 105071, and 105175.
Synacor Zimbra Collaboration Suite
6.1
CVSSv3
CVE-2016-3408
Cross-site scripting (XSS) vulnerability in Zimbra Collaboration prior to 8.7.0 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, aka bug 101813.
Synacor Zimbra Collaboration Suite
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-22120
CVE-2024-35921
CVE-2024-35874
brute force
CVE-2024-36080
unprivileged
CVE-2024-35917
IDOR
CVE-2024-4947
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
NEXT »