260 matches found
MAL-010
MAL-010: MBean pericolosi accessibili tramite JMX in Apache James Elencando e ispezionando gli MBean esposti dalla JMX su localhost, porta 9999, sono stati identificati i seguenti vettori di attacco: Scrittura arbitraria di file tramite Log4J Lettura arbitraria di file tramite Log4J Nota: A...
asf__james-project_CVE-2022-22931_3-6-0
Apache James Project :latestjamesversion: 3.8.0 image:https://img.shields.io/badge/Join%20us-Mailing%20lists-purple.svglink="https://james.apache.org/mail.html" link:https://gitter.im/apache/james-projectimage:https://badges.gitter.im/apache/james-project.svgJoin the chat at...
CVE-2023-51518
CVE-2023-51518: Deserializzazione Java pre-autenticata tramite JMX in Apache James Le distribuzioni di Apache James precedenti alle release 3.7.5 e 3.8.1 consentono l'escalation dei privilegi tramite la deserializzazione durante la pre-autenticazione JMX. Se si dispone di un gadget di...
CVE-2023-26269
CVE-2023-26269: Apache James में गलत कॉन्फ़िगर किया गया JMX डिफ़ॉल्ट रूप से, Apache James एक JMXRMI सेवा खोलता है जो लोकलहोस्ट, पोर्ट 9999 पर सुनती है। JMX को बिना प्रमाणीकरण पहुँच की अनुमति देने के लिए गलत कॉन्फ़िगर किया गया है, इसलिए James चलाने वाली मशीन पर स्थानीय पहुँच रखने वाला एक हमलावर...
EUVD-2006-2803
Malware in sbrugna...
EUVD-2023-0529
Malicious code in bioql PyPI...
EUVD-2022-0517
Malicious code in bioql PyPI...
EUVD-2023-1405
Malicious code in bioql PyPI...
EUVD-2022-0552
Malicious code in bioql PyPI...
EUVD-2022-0682
Malicious code in bioql PyPI...
EUVD-2024-0681
Malicious code in bioql PyPI...
EUVD-2024-53882
Malicious code in bioql PyPI...
EUVD-2022-2975
Malicious code in bioql PyPI...
EUVD-2022-1686
Malicious code in bioql PyPI...
EUVD-2025-4972
Malicious code in bioql PyPI...
EUVD-2022-6956
Malicious code in bioql PyPI...
EUVD-2022-0588
Malicious code in bioql PyPI...
EUVD-2022-5807
Malicious code in bioql PyPI...
EUVD-2023-0555
Malicious code in bioql PyPI...
OESA-2025-2346 apache-mime4j security update
Java stream based MIME message parser. Security Fixes: A vulnerability was found in Apache James MIME4J up to 0.8.8. It has been rated as problematic.Using CWE to declare the problem leads to CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have...