{"id":"CVE-2018-0686","aliases":["EUVD-2018-1496","GHSA-pm8w-gmc4-2w2j"],"status":"published","title":"Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4...","description":"Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) allows remote authenticated attackers to upload and execute any executable files via unspecified vectors.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01496,"percentile":0.74345,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-434"],"published":"2018-11-15T15:00:00Z","modified":"2026-06-17T01:31:27Z","products":[{"vendor":"neo","product":"debun_imap"},{"vendor":"neo","product":"debun_pop"},{"vendor":"neojapan inc.","product":"denbun by neojapan inc. (denbun pop version v3.3p r4.0 and earlier, denbun imap version v3.3i r4.0 and earlier)"}],"references":[{"url":"https://www.denbun.com/en/pop/support/security/181003.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN00344155/index.html","tags":["third-party-advisory","x_refsource_JVN","x_transferred","Third Party Advisory"]},{"url":"https://www.denbun.com/en/imap/support/security/181003.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-0686"},{"url":"https://github.com/advisories/GHSA-pm8w-gmc4-2w2j"}],"sources":{"cve":[{"id":"CVE-2018-0686","description":"Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) allows remote authenticated attackers to upload and execute any executable files via unspecified vectors.","status":"published","published":"2018-11-15T15:00:00Z","modified":"2024-08-05T03:35:49.075Z","updated_at":"2026-11-02T14:35:12.596526Z"}],"euvd":[{"id":"EUVD-2018-1496","description":"Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) allows remote authenticated attackers to upload and execute any executable files via unspecified vectors.","status":"published","published":"2018-11-15T15:00:00Z","modified":"2024-08-05T03:35:49Z","updated_at":"2026-11-03T02:40:17.442322Z"}],"ghsa":[{"id":"GHSA-pm8w-gmc4-2w2j","title":"Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4...","description":"Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) allows remote authenticated attackers to upload and execute any executable files via unspecified vectors.","status":"published","published":"2022-05-14T01:48:27Z","modified":"2023-02-02T05:04:34Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:51:54.365671Z"}],"nvd":[{"id":"CVE-2018-0686","description":"Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) allows remote authenticated attackers to upload and execute any executable files via unspecified vectors.","status":"published","published":"2018-11-15T15:29:00.723Z","modified":"2026-06-17T01:31:27.21Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:04:48.987926Z"}]}}