# cve.now: Hgiga

The newest entries naming Hgiga as an affected vendor (up to 200), of 44 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-93468](https://cve.now/CVE-2026-93468.md): HGiga｜OAKlouds - Arbitrary File Read (CVSS 8.7)
- [CVE-2026-93467](https://cve.now/CVE-2026-93467.md): HGiga｜OAKlouds - Insecure Deserialization (CVSS 9.3)
- [CVE-2026-6349](https://cve.now/CVE-2026-6349.md): HGiga｜iSherlock - OS Command Injection (CVSS 9.3)
- [CVE-2026-2236](https://cve.now/CVE-2026-2236.md): HGiga｜C&Cm@il - SQL Injection (CVSS 8.7)
- [CVE-2026-2235](https://cve.now/CVE-2026-2235.md): HGiga｜C&Cm@il - SQL Injection (CVSS 7.1)
- [CVE-2026-2234](https://cve.now/CVE-2026-2234.md): HGiga｜C&Cm@il - Missing Authentication (CVSS 9.3)
- [CVE-2025-11900](https://cve.now/CVE-2025-11900.md): HGiga｜iSherlock - OS Command Injection (CVSS 9.3)
- [CVE-2025-7451](https://cve.now/CVE-2025-7451.md): Hgiga｜iSherlock - OS Command Injection (CVSS 9.8)
- [CVE-2025-3364](https://cve.now/CVE-2025-3364.md): HGiga PowerStation - Chroot Escape (CVSS 6.7)
- [CVE-2025-3363](https://cve.now/CVE-2025-3363.md): HGiga iSherlock - OS Command Injection (CVSS 9.8)
- [CVE-2025-3362](https://cve.now/CVE-2025-3362.md): HGiga iSherlock - OS Command Injection (CVSS 9.8)
- [CVE-2025-3361](https://cve.now/CVE-2025-3361.md): HGiga iSherlock - OS Command Injection (CVSS 9.8)
- [CVE-2025-2150](https://cve.now/CVE-2025-2150.md): HGiga C&Cm@il - Stored Cross-Site Scripting (CVSS 5.4)
- [CVE-2024-9924](https://cve.now/CVE-2024-9924.md): Hgiga OAKlouds - Arbitrary File Read And Delete (CVSS 9.8)
- [CVE-2024-4299](https://cve.now/CVE-2024-4299.md): HGiga iSherlock - Command Injection (CVSS 7.2)
- [CVE-2024-4298](https://cve.now/CVE-2024-4298.md): HGiga iSherlock - Command Injection (CVSS 7.2)
- [CVE-2024-4297](https://cve.now/CVE-2024-4297.md): HGiga iSherlock - Arbitrary File Download (CVSS 4.9)
- [CVE-2024-4296](https://cve.now/CVE-2024-4296.md): HGiga iSherlock - Arbitrary File Download (CVSS 4.9)
- [CVE-2024-26261](https://cve.now/CVE-2024-26261.md): Hgiga OAKlouds - Arbitrary File Read And Delete (CVSS 9.8)
- [CVE-2024-26260](https://cve.now/CVE-2024-26260.md): Hgiga OAKlouds - Command Injection (CVSS 9.8)
- [CVE-2023-37292](https://cve.now/CVE-2023-37292.md): HGiga iSherlock - Command Injection (CVSS 9.8)
- [CVE-2023-25909](https://cve.now/CVE-2023-25909.md): HGiga Inc. OAKlouds - Arbitrary File Upload (CVSS 9.8)
- [CVE-2023-24842](https://cve.now/CVE-2023-24842.md): HGiga MailSherlock - Broken Access Control (CVSS 5.3)
- [CVE-2023-24841](https://cve.now/CVE-2023-24841.md): HGiga MailSherlock - Command Injection (CVSS 7.2)
- [CVE-2023-24840](https://cve.now/CVE-2023-24840.md): HGiga MailSherlock - SQL Injection (CVSS 7.2)
- [CVE-2023-24839](https://cve.now/CVE-2023-24839.md): HGiga MailSherlock - Reflected XSS (CVSS 6.1)
- [CVE-2023-24838](https://cve.now/CVE-2023-24838.md): HGiga PowerStation - Information Leakage (CVSS 9.8)
- [CVE-2023-24837](https://cve.now/CVE-2023-24837.md): HGiga PowerStation - Command Injection (CVSS 8.8)
- [CVE-2022-38118](https://cve.now/CVE-2022-38118.md): HGiga OAKlouds - SQL Injection (CVSS 8.8)
- [CVE-2021-37913](https://cve.now/CVE-2021-37913.md): HGiga OAKlouds - Command Injection-2 (CVSS 9.8)
- [CVE-2021-37912](https://cve.now/CVE-2021-37912.md): HGiga OAKlouds - Command Injection-1 (CVSS 9.8)
- [CVE-2021-22848](https://cve.now/CVE-2021-22848.md): HGiga MailSherlock - SQL Injection-2 (CVSS 7.0)
- [CVE-2021-22852](https://cve.now/CVE-2021-22852.md): HGiga OAKloud Portal - SQL injection -2 (CVSS 8.8)
- [CVE-2021-22851](https://cve.now/CVE-2021-22851.md): HGiga OAKloud Portal - SQL injection -1 (CVSS 9.8)
- [CVE-2021-22850](https://cve.now/CVE-2021-22850.md): HGiga OAKloud Portal - Security Misconfiguration (CVSS 5.3)
- [CVE-2020-35851](https://cve.now/CVE-2020-35851.md): HGiga MailSherlock - Command Injection (CVSS 8.1)
- [CVE-2020-35743](https://cve.now/CVE-2020-35743.md): HGiga MailSherlock - SQL Injection -3 (CVSS 7.0)
- [CVE-2020-35742](https://cve.now/CVE-2020-35742.md): HGiga MailSherlock - SQL Injection -1 (CVSS 7.0)
- [CVE-2020-35741](https://cve.now/CVE-2020-35741.md): HGiga MailSherlock - XSS -2 (CVSS 7.0)
- [CVE-2020-35740](https://cve.now/CVE-2020-35740.md): HGiga MailSherlock - XSS -1 (CVSS 7.0)
- [CVE-2020-25850](https://cve.now/CVE-2020-25850.md): HGiga MailSherlock - Arbitrary File Download (CVSS 8.1)
- [CVE-2020-25848](https://cve.now/CVE-2020-25848.md): HGiga MailSherlock - Broken Authentication (CVSS 9.8)
- [CVE-2020-10512](https://cve.now/CVE-2020-10512.md): HGiga C&Cmail - SQL Injection (CVSS 8.8)
- [CVE-2020-10511](https://cve.now/CVE-2020-10511.md): HGiga C&Cmail - Broken Access Control (CVSS 9.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/hgiga
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.