Lucene search
+L

76 matches found

OSV
OSV
added 2014/07/03 5:55 p.m.3 views

DEBIAN-CVE-2014-0477

The parse function in Email::Address module before 1.905 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service CPU consumption via an empty quoted string in an RFC 2822 address...

5CVSS7.1AI score0.03584EPSS
SaveExploits1References1
PyPA
PyPA
added 2010/11/06 12:0 a.m.7 views

PYSEC-2010-29

Multiple cross-site scripting XSS vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to 1 paste.urlparser.StaticURLParser, 2...

4.3CVSS5.9AI score0.02288EPSS
SaveExploits0References10Affected Software1
curl security advisories
curl security advisories
added 2005/12/07 8:0 a.m.9 views

URL Buffer Overflow

libcurl's URL parser function can overflow a heap based buffer in two ways, if given a too long URL. These overflows happen if you 1 - pass in a URL with no protocol like "http://" prefix, using no slash and the string is 256 bytes or longer. This leads to a single zero byte overflow of the heap...

4.6CVSS5.5AI score0.00516EPSS
SaveExploits0Affected Software2
Tenable Nessus
Tenable Nessus
added 2004/07/31 12:0 a.m.34 views

Mandrake Linux Security Advisory : sendmail (MDKSA-2003:042-1)

Michal Zalweski discovered a vulnerability in sendmail versions earlier than 8.12.9 in the address parser, which performs insufficient bounds checking in certain conditions due to a char to int conversion. This vulnerability makes it poissible for an attacker to take control of sendmail and is...

10CVSS5.4AI score0.38188EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
added 2004/07/06 12:0 a.m.36 views

RHEL 2.1 : sendmail (RHSA-2003:121)

Updated Sendmail packages are available to fix a vulnerability that allows local and possibly remote attackers to gain root privileges. Sendmail is a widely used Mail Transport Agent MTA which is included in all Red Hat Enterprise Linux distributions. There is a vulnerability in Sendmail versions...

10CVSS5.7AI score0.38188EPSS
SaveExploits2References3
NVD
NVD
added 2003/08/27 4:0 a.m.18 views

CVE-2003-0540

The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service lock via 1 a malformed envelope address to a local host that would generate a bounce and contains the ".!" string in the MAIL FROM or Errors-To headers, which causes nqmgr to lock up, or 2 v...

5CVSS6.5AI score0.21261EPSS
SaveExploits6References13
OSV
OSV
added 2003/08/27 4:0 a.m.3 views

DEBIAN-CVE-2003-0540

The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service lock via 1 a malformed envelope address to a local host that would generate a bounce and contains the ".!" string in the MAIL FROM or Errors-To headers, which causes nqmgr to lock up, or 2 v...

5CVSS6.4AI score0.21261EPSS
SaveExploits6References1
Debian CVE
Debian CVE
added 2003/08/05 4:0 a.m.40 views

CVE-2003-0540

The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service lock via 1 a malformed envelope address to a local host that would generate a bounce and contains the ".!" string in the MAIL FROM or Errors-To headers, which causes nqmgr to lock up, or 2 v...

5CVSS6.1AI score0.21261EPSS
SaveExploits6
securityvulns
securityvulns
added 2003/08/04 12:0 a.m.53 views

[Full-Disclosure] Postfix 1.1.12 remote DoS / Postfix 1.1.11 bounce scanning

Good morning list, ,--. ,--. /-- / ======================================================= ' a a ======== 1. Posfix 1.1.12 remote DoS CAN-2003-0540 . ,---. , ========================================================oo'========= There is a remotely exploitable denial of service vulnerability in...

5CVSS6.5AI score0.21261EPSS
SaveExploits6
NVD
NVD
added 2003/04/02 5:0 a.m.23 views

CVE-2003-0161

The prescan function in the address parser parseaddr.c in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers t...

10CVSS7.6AI score0.38188EPSS
SaveExploits2References24
Cvelist
Cvelist
added 2003/04/01 5:0 a.m.36 views

CVE-2003-0161

The prescan function in the address parser parseaddr.c in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers t...

7.5AI score0.38188EPSS
SaveExploits2References24
Debian CVE
Debian CVE
added 2003/04/01 5:0 a.m.33 views

CVE-2003-0161

The prescan function in the address parser parseaddr.c in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers t...

10CVSS5.4AI score0.38188EPSS
SaveExploits2
NVD
NVD
added 2002/02/27 5:0 a.m.18 views

CVE-2002-0001

Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list...

7.5CVSS7.5AI score0.03369EPSS
SaveExploits0References11
CVE
CVE
added 2002/01/03 5:0 a.m.79 views

CVE-2002-0001

CVE-2002-0001 affects mutt up to versions prior to 1.2.5.1 and 1.3.x prior to 1.3.25. The flaw is in the RFC822 address parser, where an improperly terminated comment or phrase in the address list can allow remote code execution. Debian/OpenVAS entries confirm upstream fixes in 1.2.5.1 and 1.3.25...

7.5CVSS7.5AI score0.03369EPSS
SaveExploits0References11Affected Software1
Cvelist
Cvelist
added 2002/01/03 5:0 a.m.27 views

CVE-2002-0001

Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list...

7.5AI score0.03369EPSS
SaveExploits0References11
Friends Of PHP
Friends Of PHP
added 1970/01/01 12:0 a.m.14 views

CVE-2026-48760: HtmlSanitizer URL Parser Deny Gates Underinclusive: Percent-Encoded BiDi Marks and Unicode Whitespace Bypass Visual-Spoofing Defense

More info at https://symfony.com/cve-2026-48760...

6.1CVSS5.8AI score0.00259EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder