CVE-2020-35658 | Medium | 5.3 | 2020-12-23 | SpamTitan before 7.09 allows attackers to tamper with backups, because backups are not encrypted. |
CVE-2020-24046 | High | 7.2 | 2020-09-17 | A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number o… |
CVE-2020-24045 | High | 7.2 | 2020-09-17 | A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number o… |
CVE-2020-11804 | High | 8.8 | 2020-09-17 | An issue was discovered in Titan SpamTitan 7.07. Due to improper sanitization of the parameter quid, used in the page mailqueue.php, code injection can occur… |
CVE-2020-11803 | High | 8.8 | 2020-09-17 | An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with the page mailqueue.php could lead to PHP… |
CVE-2020-11700 | Medium | 6.5 | 2020-09-17 | An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter fname, used on the page certs-x.php, would allow an attacker to retriev… |
CVE-2020-11699 | High | 8.8 | 2020-09-17 | An issue was discovered in Titan SpamTitan 7.07. Improper validation of the parameter fname on the page certs-x.php would allow an attacker to execute remote c… |
CVE-2020-11698 | Critical | 9.8 | 2020-09-17 | An issue was discovered in Titan SpamTitan 7.07. Improper input sanitization of the parameter community on the page snmp-x.php would allow a remote attacker to… |
CVE-2019-19021 | Critical | 9.8 | 2019-12-02 | An issue was discovered in TitanHQ WebTitan before 5.18. It has a hidden support account (with a hard-coded password) in the web administration interface, with… |
CVE-2019-19020 | High | 7.2 | 2019-12-02 | An issue was discovered in TitanHQ WebTitan before 5.18. In the administration web interface it is possible to upload a crafted backup file that enables an att… |
CVE-2019-19019 | High | 7.5 | 2019-12-02 | An issue was discovered in TitanHQ WebTitan before 5.18. It contains a Remote Code Execution issue through which an attacker can execute arbitrary code as root… |
CVE-2019-19018 | Low | 2.7 | 2019-12-02 | An issue was discovered in TitanHQ WebTitan before 5.18. It exposes a database configuration file under /include/dbconfig.ini in the web administration interfa… |
CVE-2019-19017 | High | 8.1 | 2019-12-02 | An issue was discovered in TitanHQ WebTitan before 5.18. The appliance has a hard-coded root password set during installation. An attacker could utilize this t… |
CVE-2019-19016 | High | 7.5 | 2019-12-02 | An issue was discovered in TitanHQ WebTitan before 5.18. Some functions, such as /history-x.php, of the administration interface are vulnerable to SQL Injectio… |
CVE-2019-19015 | Critical | 9.8 | 2019-12-02 | An issue was discovered in TitanHQ WebTitan before 5.18. The proxy service (which is typically exposed to all users) allows connections to the internal Postgre… |
CVE-2019-19014 | High | 7.8 | 2019-12-02 | An issue was discovered in TitanHQ WebTitan before 5.18. It has a sudoers file that enables low-privilege users to execute a vast number of commands as root, i… |
CVE-2019-6800 | High | 7.5 | 2019-06-05 | In TitanHQ SpamTitan through 7.03, a vulnerability exists in the spam rule update function. Updates are downloaded over HTTP, including scripts which are subse… |
CVE-2018-15136 | Medium | 5.3 | 2019-01-30 | TitanHQ SpamTitan before 7.01 has Improper input validation. This allows internal attackers to bypass the anti-spam filter to send malicious emails to an entir… |
CVE-2017-18227 | High | 7.5 | 2018-03-12 | TitanHQ WebTitan Gateway has incorrect certificate validation for the TLS interception feature. |