Lucene search
K

56 matches found

OSV
OSV
added 2021/01/19 3:15 p.m.1 views

UBUNTU-CVE-2021-3181

rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service mailbox unavailability by sending email messages with sequences of semicolon characters in RFC822 address fields aka terminators of empty groups. A small email message from the attacker can cause large memory...

6.5CVSS6.6AI score0.02806EPSS
Exploits0References8
Debian CVE
Debian CVE
added 2021/01/19 2:30 p.m.33 views

CVE-2021-3181

rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service mailbox unavailability by sending email messages with sequences of semicolon characters in RFC822 address fields aka terminators of empty groups. A small email message from the attacker can cause large memory...

6.5CVSS6.6AI score0.02806EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2021/01/19 2:30 p.m.35 views

CVE-2021-3181

rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service mailbox unavailability by sending email messages with sequences of semicolon characters in RFC822 address fields aka terminators of empty groups. A small email message from the attacker can cause large memory...

6.5CVSS6.6AI score0.02806EPSS
Exploits0
FreeBSD
FreeBSD
added 2021/01/17 12:0 a.m.27 views

mutt -- denial of service

Tavis Ormandy reports: rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service mailbox unavailability by sending email messages with sequences of semicolon characters in RFC822 address fields aka terminators of empty groups. A small email message from the attacker can...

6.5CVSS4.3AI score0.02806EPSS
Exploits0References1
OSV
OSV
added 2018/09/07 10:29 p.m.3 views

CVE-2018-14397

An issue was discovered in Creme CRM 1.6.12. The organization creation page is affected by 9 stored cross-site scripting vulnerabilities involving the name, billingaddress-address, billingaddress-zipcode, billingaddress-city, billingaddress-department, shippingaddress-address,...

5.4CVSS5.7AI score
Exploits0References1
OSV
OSV
added 2018/09/07 10:29 p.m.2 views

CVE-2018-14396

An issue was discovered in Creme CRM 1.6.12. The salesman creation page is affected by 10 stored cross-site scripting vulnerabilities involving the firstname, lastname, billingaddress-address, billingaddress-zipcode, billingaddress-city, billingaddress-department, shippingaddress-address,...

5.4CVSS5.7AI score
Exploits0References1
CNVD
CNVD
added 2018/08/13 12:0 a.m.1 views

PHP Scripts Mall hotel-booking-script Cross-Site Scripting Vulnerability

PHP Scripts Mall hotel-booking-script is a multi-vendor hotel booking script. PHP Scripts Mall hotel-booking-script 2.0.4 suffers from a cross-site scripting vulnerability that can be exploited by an attacker via the First Name, Last Name or Address fields...

5.4CVSS5.3AI score0.00545EPSS
Exploits1References1
OSV
OSV
added 2018/08/06 9:29 p.m.3 views

CVE-2018-14869

PHP Template Store Script 3.0.6 allows XSS via the Address line 1, Address Line 2, Bank name, or A/C Holder name field in a profile...

5.4CVSS5.8AI score0.01604EPSS
Exploits5References2
Check Point Advisories
Check Point Advisories
added 2009/12/13 12:0 a.m.1 views

Sendmail Header Processing Buffer Overflow (CVE-2002-1337)

Sendmail is a general purpose internetwork email routing facility that supports many kinds of mail-transfer and mail-delivery methods, including the Simple Mail Transfer Protocol SMTP used for email transport over the Internet. There exists a buffer overflow vulnerability in Sendmail 5.79 to 8.12...

10CVSS4.4AI score0.72202EPSS
Exploits1
Cvelist
Cvelist
added 2009/09/18 9:0 p.m.16 views

CVE-2009-3257

vtiger CRM before 5.1.0 allows remote authenticated users to bypass the permissions on the 1 Account Billing Address and 2 Shipping Address fields in a profile by creating a Sales Order SO associated with that profile...

6.2AI score0.00864EPSS
Exploits1References2
Drupal
Drupal
added 2008/04/02 12:0 a.m.8 views

SA-2008-023 - Ubercart - Cross site scripting

During checkout in Ubercart enabled stores, customers have text fields in which to enter their address and order information. Some stores will have modules enabled that restrict what sort of values are accepted in these fields, but this is not the case for everyone. This provides an opportunity f...

6.5AI score
Exploits0References4
securityvulns
securityvulns
added 2007/11/02 12:0 a.m.20 views

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Ripe CMS: crossite scripting in http://site/contact-us with Name, address, Subject fields...

Exploits0References4Affected Software4
Cvelist
Cvelist
added 2004/09/01 4:0 a.m.34 views

CVE-2002-1337

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c...

7.6AI score0.72202EPSS
Exploits1References25
Debian CVE
Debian CVE
added 2004/09/01 4:0 a.m.23 views

CVE-2002-1337

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c...

10CVSS7.8AI score0.72202EPSS
Exploits1
NVD
NVD
added 2003/03/07 5:0 a.m.16 views

CVE-2002-1337

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c...

10CVSS7.7AI score0.72202EPSS
Exploits1References25
OSV
OSV
added 2003/03/07 5:0 a.m.5 views

CVE-2002-1337

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c...

7.7AI score
Exploits0References34
Rows per page
Query Builder