Lucene search
+L

62 matches found

CNNVD
CNNVD
•added 2025/05/04 12:00 a.m.•19 views

PCMan FTP Server 安全漏洞

PCMan FTP Server is PCMan open source set of FTP server software. A buffer overflow vulnerability exists in PCMan FTP Server 'APPEND', which originates from the APPEND command handler failing to properly validate the length and size of input data, and can be exploited by an attacker to execute...

9.8CVSS8AI score0.00742EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/04 12:00 a.m.•2 views

CVE-2025-4252: Buffer Copy without Checking Size of Input

A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. Affected is an unknown function of the component APPEND Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public a...

9.8CVSS7.3AI score0.00742EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•19 views

PT-2025-18966 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue has been found in the APPEND Command Handler component, which can be exploited remotely. The manipulation leads to a buffer overflow. Recommendations: For PCMan FTP Server version...

9.8CVSS7.5AI score0.00742EPSS
SaveExploits1References15
SUSE CVE
SUSE CVE
•added 2023/02/15 6:11 a.m.•6 views

SUSE CVE-2007-4211

The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...

6CVSS6.8AI score0.01375EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2023/01/06 10:01 p.m.•55 views

CVE-2022-45935

Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions...

5.5CVSS5.1AI score0.0036EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2023/01/06 12:31 p.m.•37 views

Apache James server allows an attacker with local access to access private user data in transit

Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions...

5.5CVSS5.3AI score0.0036EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2023/01/06 10:15 a.m.•49 views

CVE-2022-45935

Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions...

5.5CVSS5.3AI score0.0036EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/01/06 9:33 a.m.•10 views

CVE-2022-45935 Apache James server: Temporary File Information Disclosure

Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions...

6.5AI score0.0036EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/01/06 12:00 a.m.•10 views

PT-2023-14802 · Apache · Apache James Server

Name of the Vulnerable Software and Affected Versions: Apache James server versions 3.7.2 and prior versions Description: The issue allows an attacker with local access to access private user data in transit due to the usage of temporary files with insecure permissions by the Apache James server...

5.5CVSS7.1AI score0.0036EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/06 12:00 a.m.•3 views

CVE-2022-45935: Exposure of Resource to Wrong Sphere

Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions...

5.5CVSS5.8AI score0.0036EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/06/03 12:00 a.m.•11 views

The vulnerability of the Vim text editor’s append command allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Vim text editor’s append command relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code by loading a specially created file...

7.3CVSS7.7AI score0.02712EPSS
SaveExploits1References20Affected Software8
OSV
OSV
•added 2022/05/18 11:04 a.m.•11 views

OESA-2022-1656 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

9.8CVSS7.7AI score0.02712EPSS
SaveExploits2References3
OSV
OSV
•added 2022/05/07 7:15 p.m.•6 views

DEBIAN-CVE-2022-1616

Use after free in appendcommand in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

7.8CVSS7.9AI score0.02712EPSS
SaveExploits1References1
OSV
OSV
•added 2022/05/07 7:15 p.m.•25 views

AZL-9737 CVE-2022-1616 affecting package vim for versions less than 8.2.4925-1

Use after free in appendcommand in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

7.8CVSS7.4AI score0.02712EPSS
SaveExploits1References1
OSV
OSV
•added 2022/05/07 7:15 p.m.•18 views

UBUNTU-CVE-2022-1616

Use after free in appendcommand in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

7.8CVSS7.3AI score0.02712EPSS
SaveExploits1References8
CNVD
CNVD
•added 2016/08/23 12:00 a.m.•6 views

Easy FTP Server APPE Remote Code Execution Vulnerability

Easy FTP Server is a free green software that does not require installation and is prohibited for commercial use Supports multiple users, multiple permissions, multiple directories, supports web access, supports Windows system service mode. Easy FTP Server has a security vulnerability. Due to the...

7.7AI score
SaveExploits0References1
Prion
Prion
•added 2009/09/08 10:30 a.m.•22 views

Buffer overflow

Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long first argument to the APPEND command, a different vector than CVE-2008-1497 a...

4CVSS7.8AI score0.24277EPSS
SaveExploits4References4Affected Software1
Cvelist
Cvelist
•added 2009/09/08 10:00 a.m.•34 views

CVE-2008-7182

Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long first argument to the APPEND command, a different vector than CVE-2008-1497 a...

7.3AI score0.24277EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/09/08 12:00 a.m.•5 views

CVE-2008-7182: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long first argument to the APPEND command, a different vector than CVE-2008-1497 a...

4CVSS6.4AI score0.24277EPSS
SaveExploits2References2
NVD
NVD
•added 2008/09/11 9:06 p.m.•42 views

CVE-2008-4041

The IMAP server in Softalk Mail Server formerly WorkgroupMail 8.5.1.431 allows remote authenticated users to cause a denial of service resource consumption and daemon crash via a long IMAP APPEND command with certain repeated parameters...

4CVSS6.3AI score0.02348EPSS
SaveExploits1References5
Rows per page
Query Builder