Lucene search
K

36 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-4710

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.01321EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-5307

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.0052EPSS
Exploits0References4
OSV
OSV
added 2024/06/15 12:0 a.m.10 views

OPENSUSE-SU-2024:10619-1 apache-commons-email-1.5-3.10 on GA media

These are all security issues fixed in the apache-commons-email-1.5-3.10 package on the GA media of openSUSE Tumbleweed...

7.5CVSS7.6AI score0.01321EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 4:44 a.m.2 views

SUSE CVE-2017-9801

When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitrary SMTP headers...

7.5CVSS7.7AI score0.01321EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:34 a.m.1 views

SUSE CVE-2018-1294

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

7.5CVSS7.4AI score0.0052EPSS
Exploits0References3
NCSC
NCSC
added 2022/07/27 12:0 a.m.1 views

Vulnerabilities fixed in IBM QRadar SIEM

Vulnerabilities have been fixed in IBM QRadar SIEM. A remote malicious party could, by misusing the Apache Commons Email component to obtain sensitive information or manipulate user data in SMTP headers. IBM has released updates to fix the vulnerabilities in QRadar. For more information, see:...

7.5CVSS6.6AI score0.01321EPSS
Exploits0
IBM Security Bulletins
IBM Security Bulletins
added 2022/07/26 2:17 p.m.24 views

Security Bulletin: Apache Commons Email as used by IBM QRadar SIEM is vulnerable to information disclosure (CVE-2017-9801, CVE-2018-1294)

Summary Apache Commons Email as used by IBM QRadar SIEM is vulnerable to information disclosure. IBM QRadar SIEM has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2017-9801 DESCRIPTION: Apache Commons Email could allow a remote attacker to inject header data, caused by an error i...

7.5CVSS7.3AI score0.01321EPSS
Exploits0Affected Software1
OSV
OSV
added 2022/05/17 2:15 a.m.0 views

GHSA-P7VM-PHXX-G722 Improper Input Validation in Apache Commons Email

When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitrary SMTP headers...

7.5CVSS7.2AI score0.01321EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2022/05/17 2:15 a.m.20 views

Improper Input Validation in Apache Commons Email

When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitrary SMTP headers...

7.5CVSS3.3AI score0.01321EPSS
Exploits0References5Affected Software1
vulnersOsv
vulnersOsv
added 2022/05/14 1:28 a.m.2 views

at.researchstudio.sat:won-owner-webapp (=0.3), at.researchstudio.sat:won-utils-mail (>=0.2 <=0.9) +1390 more potentially affected by CVE-2018-1294 via org.apache.commons:commons-email (>=1.1 <=1.4)

org.apache.commons:commons-email MAVEN version =1.1, =0.2, =1.0.0, =1.2.8, =1.0.2, =1.2, =1.0.0, =1.0.1, =0.0.1, =2.23.0, =1.1, =1.4 and more Source cves: CVE-2018-1294 Source advisory: OSV:GHSA-V7CM-W955-PJ6G...

7.5CVSS7AI score0.0052EPSS
Exploits0
Github Security Blog
Github Security Blog
added 2022/05/14 1:28 a.m.34 views

Improper Input Validation Apache Commons Email

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

7.5CVSS2.8AI score0.0052EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2022/05/14 1:28 a.m.0 views

GHSA-V7CM-W955-PJ6G Improper Input Validation Apache Commons Email

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

7.5CVSS5.9AI score0.0052EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.20 views

Mageia: Security Advisory (MGASA-2018-0136)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.0052EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.16 views

Mageia: Security Advisory (MGASA-2017-0322)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.01321EPSS
Exploits0References4
CNVD
CNVD
added 2018/03/23 12:0 a.m.2 views

Apache Commons-Email Information Disclosure Vulnerability

Apache Commons-Email is the United States Apache Apache Software Foundation, an application programming interface that provides e-mail sending capabilities. An information disclosure vulnerability exists in Apache Commons-Email that originates from the program failing to properly validate input. ...

7.5CVSS6.3AI score0.0052EPSS
Exploits0References1
OSV
OSV
added 2018/03/20 5:29 p.m.0 views

UBUNTU-CVE-2018-1294

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

7.5CVSS5.8AI score0.0052EPSS
Exploits0References3
NVD
NVD
added 2018/03/20 5:29 p.m.14 views

CVE-2018-1294

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

7.5CVSS7.4AI score0.0052EPSS
Exploits0References1
OSV
OSV
added 2018/03/20 5:29 p.m.3 views

CVE-2018-1294

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

7.5CVSS5.8AI score
Exploits0References1
Prion
Prion
added 2018/03/20 5:29 p.m.15 views

Input validation

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

5CVSS7.3AI score0.0052EPSS
Exploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2018/03/20 5:29 p.m.27 views

CVE-2018-1294

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

7.5CVSS7AI score0.0052EPSS
Exploits0References2
Rows per page
Query Builder