489 matches found
SUSE CVE-2024-3772
Regular expression denial of service in Pydanic 2.4.0, 1.10.13 allows remote attackers to cause denial of service via a crafted email string...
Pydantic regular expression denial of service
Regular expression denial of service in Pydantic 2.4.0, 1.10.13 allows remote attackers to cause denial of service via a crafted email string...
GHSA-MR82-8J83-VXMV Pydantic regular expression denial of service
Regular expression denial of service in Pydantic 2.4.0, 1.10.13 allows remote attackers to cause denial of service via a crafted email string...
CVE-2024-3772
Regular expression denial of service in Pydanic 2.4.0, 1.10.13 allows remote attackers to cause denial of service via a crafted email string...
DEBIAN-CVE-2024-3772
Regular expression denial of service in Pydanic 2.4.0, 1.10.13 allows remote attackers to cause denial of service via a crafted email string...
UBUNTU-CVE-2024-3772
Regular expression denial of service in Pydanic 2.4.0, 1.10.13 allows remote attackers to cause denial of service via a crafted email string...
CVE-2024-3772 Regular expression denial of service in Pydantic < 2.4.0
Regular expression denial of service in Pydanic 2.4.0, 1.10.13 allows remote attackers to cause denial of service via a crafted email string...
CVE-2024-3772
CVE-2024-3772 affects Pydantic: Regular expression denial of service in Pydantic versions before 2.4.0 and before 1.10.13. An attacker can trigger DoS via a crafted email string. Affected components: Pydantic's regex validation. Impact: remote DoS with network access. Remediation: upgrade to Pyda...
CVE-2024-3772 Regular expression denial of service in Pydantic < 2.4.0
Regular expression denial of service in Pydanic 2.4.0, 1.10.13 allows remote attackers to cause denial of service via a crafted email string...
CVE-2024-3772
Regular expression denial of service in Pydanic 2.4.0, 1.10.13 allows remote attackers to cause denial of service via a crafted email string...
PT-2024-5856
Name of the Vulnerable Software and Affected Versions Pydantic versions prior to 2.4.0 Pydantic versions prior to 1.10.13 Description The issue is related to the use of regular expressions in the Pydantic library, which can lead to a denial of service when exploited by a remote attacker. This can...
CVE-2024-25501
An issue WinMail v.7.1 and v.5.1 and before allows a remote attacker to execute arbitrary code via a crafted script to the email parameter...
Tutanota Input Validation Error Vulnerability
Tutanota is a very security- and privacy-conscious email service from Tuta that encrypts email, contacts, and calendar entries on all devices. An input validation error vulnerability exists in Tutanota versions 3.118.12 through 3.119.10, which stems from an attacker being able to send a manipulat...
EulerOS 2.0 SP11 : mutt (EulerOS-SA-2023-3252)
According to the versions of the mutt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Null pointer dereference when viewing a specially crafted email in Mutt 1.5.2 1.5.2 1.5.2 1...
EulerOS 2.0 SP10 : mutt (EulerOS-SA-2023-3187)
According to the versions of the mutt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Null pointer dereference when viewing a specially crafted email in Mutt 1.5.2 1.5.2 1.5.2 1...
Zero-Click Outlook RCE Exploitation Chain in Windows
Summary: Two vulnerabilities CVE-2023-35384 and CVE-2023-36710 in Microsoft Windows can be chained to achieve remote code execution RCE on vulnerable Outlook clients. Attackers can exploit these flaws by sending a crafted email with a custom notification sound file to trigger the download of a...
The vulnerability of the MSHTML platform in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the MSHTML platform in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted email...
PT-2023-7642 · Microsoft · Windows Mshtml Platform +4
Name of the Vulnerable Software and Affected Versions: Windows MSHTML Platform affected versions not specified Description: The vulnerability in the Windows MSHTML Platform is related to insufficient input validation, allowing remote attackers to execute arbitrary code by sending a specially...
OESA-2023-1660 mutt security update
Mutt is a small but very powerful text-based mail client for Unix operating systems. Security Fixes: Null pointer dereference when viewing a specially crafted email in Mutt 1.5.2 2.2.12CVE-2023-4874 Null pointer dereference when composing from a specially crafted draft message in Mutt 1.5.2...
CVE-2023-4875
A null pointer dereference flaw was found in mutt when handling specially crafted characters. This issue could allow an attacker to send a specially crafted email that causes the email client to crash when reading or processing the email. Mitigation Mitigation for this issue is either not availab...