Lucene search
+L

16 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2022-5307

Malicious code in bioql PyPI...

7.5CVSS7.1AI score0.02765EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2023/02/15 4:34 a.m.•11 views

SUSE CVE-2018-1294

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

7.5CVSS7.4AI score0.02765EPSS
SaveExploits0References3
OSV
OSV
•added 2022/05/14 1:28 a.m.•23 views

GHSA-V7CM-W955-PJ6G Improper Input Validation Apache Commons Email

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

7.5CVSS5.9AI score0.02765EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2022/05/14 1:28 a.m.•50 views

Improper Input Validation Apache Commons Email

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

7.5CVSS2.8AI score0.02765EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
•added 2018/03/20 5:29 p.m.•42 views

CVE-2018-1294

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

7.5CVSS7AI score0.02765EPSS
SaveExploits0References2
OSV
OSV
•added 2018/03/20 5:29 p.m.•14 views

UBUNTU-CVE-2018-1294

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

7.5CVSS5.8AI score0.02765EPSS
SaveExploits0References3
OSV
OSV
•added 2018/03/20 5:29 p.m.•14 views

CVE-2018-1294

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

7.5CVSS5.8AI score0.02765EPSS
SaveExploits0References1
NVD
NVD
•added 2018/03/20 5:29 p.m.•30 views

CVE-2018-1294

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

7.5CVSS7.4AI score0.02765EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2018/03/20 5:00 p.m.•84 views

CVE-2018-1294

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

7.5CVSS7.4AI score0.02765EPSS
SaveExploits0
Cvelist
Cvelist
•added 2018/03/20 5:00 p.m.•55 views

CVE-2018-1294

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

7.3AI score0.02765EPSS
SaveExploits0References1
CVE
CVE
•added 2018/03/20 5:00 p.m.•142 views

CVE-2018-1294

CVE-2018-1294 affects Apache Commons-Email: when unvalidated input is used as the Bounce Address and contains line breaks, email details (recipients, contents, etc.) may be manipulated. The risk is mitigated by upgrading to Commons-Email 1.5 or by stripping line breaks from data passed to Email.s...

7.5CVSS7.2AI score0.02765EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2018/03/20 5:00 p.m.•3 views

CVE-2018-1294

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

8.7CVSS0.02765EPSS
SaveExploits0References2
OSV
OSV
•added 2018/02/24 11:25 p.m.•13 views

MGASA-2018-0136 Updated apache-commons-email packages fix security vulnerability

Apache Commons-Email, from version 1.0 to 1.4 inclusive, does not properly validate bounce addresses. If a user of Commons-Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients,...

7.5CVSS7.4AI score0.02765EPSS
SaveExploits0References3
Mageia
Mageia
•added 2018/02/24 11:25 p.m.•47 views

Updated apache-commons-email packages fix security vulnerability

Apache Commons-Email, from version 1.0 to 1.4 inclusive, does not properly validate bounce addresses. If a user of Commons-Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients,...

7.5CVSS2.4AI score0.02765EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/02/24 12:00 a.m.•2 views

PT-2018-11495

Name of the Vulnerable Software and Affected Versions Apache Commons Email versions prior to 1.5 Description The issue allows manipulation of email details, such as recipients and contents, if unvalidated input containing line-breaks is passed as the "Bounce Address". Recommendations For versions...

7.5CVSS0.02765EPSS
SaveExploits0References12
Veracode
Veracode
•added 2018/01/29 3:11 a.m.•38 views

Information Disclosure

commons-email is vulnerable to information disclosure. If the Bounce Address is not validated on the applications side, commons-email allows line-breaks in the address. This means that its possible for the email details to be manipulated...

7.5CVSS7AI score0.02765EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder