Lucene search
+L

23491 matches found

RedHat Linux
RedHat Linux
added 2026/04/16 2:48 p.m.26 views

dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw

A flaw was found in the .NET runtime System.Net.Mail in how email address data is parsed. Improper neutralization of special characters, specifically carriage return and line feed CR/LF sequences, may allow specially crafted email address input to be interpreted incorrectly. An attacker could...

7.5CVSS6.1AI score0.02279EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/04/16 2:46 p.m.27 views

dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw

A flaw was found in the .NET runtime System.Net.Mail in how email address data is parsed. Improper neutralization of special characters, specifically carriage return and line feed CR/LF sequences, may allow specially crafted email address input to be interpreted incorrectly. An attacker could...

7.5CVSS6.1AI score0.02279EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/04/16 2:19 p.m.33 views

dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw

A flaw was found in the .NET runtime System.Net.Mail in how email address data is parsed. Improper neutralization of special characters, specifically carriage return and line feed CR/LF sequences, may allow specially crafted email address input to be interpreted incorrectly. An attacker could...

7.5CVSS6.1AI score0.02279EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/04/16 2:14 p.m.17 views

dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw

A flaw was found in the .NET runtime System.Net.Mail in how email address data is parsed. Improper neutralization of special characters, specifically carriage return and line feed CR/LF sequences, may allow specially crafted email address input to be interpreted incorrectly. An attacker could...

7.5CVSS6.1AI score0.02279EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/04/16 2:9 p.m.8 views

dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw

A flaw was found in the .NET runtime System.Net.Mail in how email address data is parsed. Improper neutralization of special characters, specifically carriage return and line feed CR/LF sequences, may allow specially crafted email address input to be interpreted incorrectly. An attacker could...

7.5CVSS6.1AI score0.02279EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/04/16 1:57 p.m.14 views

dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw

A flaw was found in the .NET runtime System.Net.Mail in how email address data is parsed. Improper neutralization of special characters, specifically carriage return and line feed CR/LF sequences, may allow specially crafted email address input to be interpreted incorrectly. An attacker could...

7.5CVSS6.1AI score0.02279EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/04/16 1:56 p.m.13 views

dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw

A flaw was found in the .NET runtime System.Net.Mail in how email address data is parsed. Improper neutralization of special characters, specifically carriage return and line feed CR/LF sequences, may allow specially crafted email address input to be interpreted incorrectly. An attacker could...

7.5CVSS6.1AI score0.02279EPSS
SaveExploits0References4
Snyk
Snyk
added 2026/04/16 1:29 p.m.7 views

Directory Traversal

Overview @fastify/static is a Plugin for serving static files as fast as possible. Affected versions of this package are vulnerable to Directory Traversal via the dirList.path function when directory listing is enabled. An attacker can access directory listings outside the configured static root ...

6.9CVSS6.4AI score0.00506EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/04/16 1:22 p.m.11 views

CVE-2026-30480

A Local File Inclusion LFI vulnerability in the NFSen module nfsen.inc.php of LibreNMS 22.11.0-23-gd091788f2 allows authenticated attackers to include arbitrary PHP files from the server filesystem via path traversal sequences in the nfsen parameter...

6.5CVSS5.9AI score0.00265EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/04/16 10:49 a.m.10 views

CVE-2026-40505

A flaw was found in MuPDF mutool. This vulnerability allows a local attacker to embed malicious ANSI escape sequences within a PDF's metadata. When a user views the PDF's information using the mutool info command, these unsanitized sequences are processed by the terminal. This can lead to the...

4.8CVSS5.9AI score0.00166EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/16 3:31 a.m.15 views

EUVD-2026-23147

MuPDF mutool does not sanitize PDF metadata fields before writing them to terminal output, allowing attackers to inject arbitrary ANSI escape sequences through crafted PDF metadata. Attackers can embed malicious ANSI escape codes in PDF metadata that are passed unsanitized to the terminal when...

4.8CVSS5.9AI score0.00166EPSS
SaveExploits0References3
OSV
OSV
added 2026/04/16 2:16 a.m.7 views

DEBIAN-CVE-2026-40505

MuPDF before 1.27 contains an ANSI injection vulnerability in mutool that allows attackers to inject arbitrary ANSI escape sequences through crafted PDF metadata fields. Attackers can embed malicious ANSI escape codes in PDF metadata that are passed unsanitized to terminal output when running...

4.8CVSS5.5AI score0.00166EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/16 2:16 a.m.11 views

CVE-2026-40505

MuPDF before 1.27 contains an ANSI injection vulnerability in mutool that allows attackers to inject arbitrary ANSI escape sequences through crafted PDF metadata fields. Attackers can embed malicious ANSI escape codes in PDF metadata that are passed unsanitized to terminal output when running...

4.8CVSS0.00166EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/04/16 2:16 a.m.8 views

CVE-2026-40505

MuPDF before 1.27 contains an ANSI injection vulnerability in mutool that allows attackers to inject arbitrary ANSI escape sequences through crafted PDF metadata fields. Attackers can embed malicious ANSI escape codes in PDF metadata that are passed unsanitized to terminal output when running...

4.8CVSS5.9AI score0.00166EPSS
SaveExploits0References3
OSV
OSV
added 2026/04/16 2:16 a.m.18 views

UBUNTU-CVE-2026-40505

MuPDF before 1.27 contains an ANSI injection vulnerability in mutool that allows attackers to inject arbitrary ANSI escape sequences through crafted PDF metadata fields. Attackers can embed malicious ANSI escape codes in PDF metadata that are passed unsanitized to terminal output when running...

4.8CVSS5.9AI score0.00166EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/04/16 1:20 a.m.6 views

CVE-2026-40505 MuPDF < 1.27 mutool ANSI Injection via Metadata

MuPDF before 1.27 contains an ANSI injection vulnerability in mutool that allows attackers to inject arbitrary ANSI escape sequences through crafted PDF metadata fields. Attackers can embed malicious ANSI escape codes in PDF metadata that are passed unsanitized to terminal output when running...

4.8CVSS6.2AI score0.00166EPSS
SaveExploits0References4
OSV
OSV
added 2026/04/16 1:20 a.m.10 views

CVE-2026-40505 MuPDF < 1.27 mutool ANSI Injection via Metadata

MuPDF before 1.27 contains an ANSI injection vulnerability in mutool that allows attackers to inject arbitrary ANSI escape sequences through crafted PDF metadata fields. Attackers can embed malicious ANSI escape codes in PDF metadata that are passed unsanitized to terminal output when running...

4.8CVSS6.1AI score
SaveExploits0References6
Debian CVE
Debian CVE
added 2026/04/16 1:20 a.m.7 views

CVE-2026-40505

MuPDF before 1.27 contains an ANSI injection vulnerability in mutool that allows attackers to inject arbitrary ANSI escape sequences through crafted PDF metadata fields. Attackers can embed malicious ANSI escape codes in PDF metadata that are passed unsanitized to terminal output when running...

4.8CVSS5.5AI score0.00166EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/04/16 1:20 a.m.46 views

CVE-2026-40505 MuPDF < 1.27 mutool ANSI Injection via Metadata

MuPDF before 1.27 contains an ANSI injection vulnerability in mutool that allows attackers to inject arbitrary ANSI escape sequences through crafted PDF metadata fields. Attackers can embed malicious ANSI escape codes in PDF metadata that are passed unsanitized to terminal output when running...

4.8CVSS0.00166EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
added 2026/04/16 1:20 a.m.44 views

CVE-2026-40505

MuPDF before 1.27 contains an ANSI injection vulnerability in mutool that allows attackers to inject arbitrary ANSI escape sequences through crafted PDF metadata fields. Attackers can embed malicious ANSI escape codes in PDF metadata that are passed unsanitized to terminal output when running...

4.8CVSS5.9AI score0.00166EPSS
SaveExploits0References4
Rows per page
Query Builder