Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-73576 |
|
Vulnerability in synacor (CVE-2026-73576)
vulnerability in synacor (CVE-2026-73576). Data can be tampered with by attackers.
|
| CVE-2026-73575 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-73575)
vulnerability in csrf (CVE-2026-73575). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73574 |
|
Vulnerability in synacor (CVE-2026-73574)
vulnerability in synacor (CVE-2026-73574). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73573 |
|
Vulnerability in path-traversal (CVE-2026-73573)
vulnerability in path-traversal (CVE-2026-73573). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73572 |
|
Cross-Site Scripting (XSS) in synacor (CVE-2026-73572)
cross-site scripting in synacor (CVE-2026-73572). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73571 |
|
Authorization Flaw in c (CVE-2026-73571)
vulnerability in c (CVE-2026-73571). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73570 KEV |
|
[KEV] OS Command Injection in Synacor zimbra-collaboration-suite (CVE-2026-73570)
OS command injection in Synacor zimbra-collaboration-suite (CVE-2026-73570). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
| CVE-2020-7796 KEV |
|
[KEV] SSRF (Server-Side Request Forgery) in Synacor zimbra-collaboration-suite (CVE-2020-7796)
SSRF in Synacor zimbra-collaboration-suite (CVE-2020-7796). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2022-27925 KEV |
|
[KEV] Path Traversal in Synacor zimbra-collaboration-suite-zcs (CVE-2022-27925)
path traversal in Synacor zimbra-collaboration-suite-zcs (CVE-2022-27925). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2022-37042 KEV |
|
[KEV] Path Traversal in Synacor zimbra-collaboration-suite-zcs (CVE-2022-37042)
path traversal in Synacor zimbra-collaboration-suite-zcs (CVE-2022-37042). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2022-27924 KEV |
|
[KEV] Vulnerability in Synacor zimbra-collaboration-suite-zcs (CVE-2022-27924)
vulnerability in Synacor zimbra-collaboration-suite-zcs (CVE-2022-27924). Data can be tampered with by attackers. Listed in CISA KEV — actively exploited.
|
| CVE-2018-6882 KEV |
|
[KEV] Cross-Site Scripting (XSS) in Synacor zimbra-collaboration-suite-zcs (CVE-2018-6882)
cross-site scripting in Synacor zimbra-collaboration-suite-zcs (CVE-2018-6882). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2022-24682 KEV |
|
[KEV] Vulnerability in Synacor zimbra-collaborate-suite-zcs (CVE-2022-24682)
vulnerability in Synacor zimbra-collaborate-suite-zcs (CVE-2022-24682). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2017-7288 |
|
Cross-Site Scripting (XSS) in synacor (CVE-2017-7288)
cross-site scripting in synacor (CVE-2017-7288). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-6821 |
|
Path Traversal in path-traversal (CVE-2017-6821)
path traversal in path-traversal (CVE-2017-6821). Successful exploitation can lead to full system takeover.
|
| CVE-2017-6813 |
|
Vulnerability in synacor (CVE-2017-6813)
vulnerability in synacor (CVE-2017-6813). Successful exploitation can lead to full system takeover.
|
| CVE-2016-3403 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2016-3403)
vulnerability in csrf (CVE-2016-3403). Successful exploitation can lead to full system takeover. Exploitable via `Referer header`.
|
| CVE-2016-9924 |
|
XXE (XML External Entity) in synacor (CVE-2016-9924)
vulnerability in synacor (CVE-2016-9924). Successful exploitation can lead to full system takeover.
|
| CVE-2016-4019 |
|
Vulnerability in synacor (CVE-2016-4019)
vulnerability in synacor (CVE-2016-4019). Data can be tampered with by attackers.
|
| CVE-2016-3401 |
|
Vulnerability in synacor (CVE-2016-3401)
vulnerability in synacor (CVE-2016-3401). Data can be tampered with by attackers.
|
| CVE-2016-3402 |
|
Vulnerability in synacor (CVE-2016-3402)
vulnerability in synacor (CVE-2016-3402). Confidential information can be exposed externally.
|
| CVE-2016-3404 |
|
Vulnerability in synacor (CVE-2016-3404)
vulnerability in synacor (CVE-2016-3404). Data can be tampered with by attackers.
|
| CVE-2016-3405 |
|
Vulnerability in synacor (CVE-2016-3405)
vulnerability in synacor (CVE-2016-3405). Data can be tampered with by attackers.
|
| CVE-2016-3999 |
|
Cross-Site Scripting (XSS) in synacor (CVE-2016-3999)
cross-site scripting in synacor (CVE-2016-3999). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-3415 |
|
Unsafe Deserialization in deserialization (CVE-2016-3415)
vulnerability in deserialization (CVE-2016-3415). Confidential information can be exposed externally.
|
| CVE-2016-3414 |
|
Vulnerability in synacor (CVE-2016-3414)
vulnerability in synacor (CVE-2016-3414). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-3413 |
|
Vulnerability in synacor (CVE-2016-3413)
vulnerability in synacor (CVE-2016-3413). Data can be tampered with by attackers.
|
| CVE-2016-3412 |
|
Cross-Site Scripting (XSS) in synacor (CVE-2016-3412)
cross-site scripting in synacor (CVE-2016-3412). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-3411 |
|
Cross-Site Scripting (XSS) in synacor (CVE-2016-3411)
cross-site scripting in synacor (CVE-2016-3411). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-3410 |
|
Cross-Site Scripting (XSS) in synacor (CVE-2016-3410)
cross-site scripting in synacor (CVE-2016-3410). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-3409 |
|
Cross-Site Scripting (XSS) in synacor (CVE-2016-3409)
cross-site scripting in synacor (CVE-2016-3409). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-3408 |
|
Cross-Site Scripting (XSS) in synacor (CVE-2016-3408)
cross-site scripting in synacor (CVE-2016-3408). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-3407 |
|
Cross-Site Scripting (XSS) in synacor (CVE-2016-3407)
cross-site scripting in synacor (CVE-2016-3407). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-3406 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2016-3406)
vulnerability in csrf (CVE-2016-3406). Successful exploitation can lead to full system takeover.
|