Lucene search
+L

449 matches found

OSV
OSV
added 2025/12/18 9:30 a.m.10 views

GHSA-46J5-6FG5-4GV3 Duplicate Advisory: Nodemailer is vulnerable to DoS through Uncontrolled Recursion

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-rcmh-qjqh-p98v. This link is maintained to preserve external references. Original Description A flaw was found in Nodemailer. This vulnerability allows a denial of service DoS via a crafted email address header...

5.3CVSS6.2AI score0.00469EPSS
SaveExploits1References6
NVD
NVD
added 2025/12/18 9:15 a.m.14 views

CVE-2025-14874

A flaw was found in Nodemailer. This vulnerability allows a denial of service DoS via a crafted email address header that triggers infinite recursion in the address parser...

7.5CVSS0.00469EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/12/18 8:40 a.m.7 views

CVE-2025-14874 Nodemailer: nodemailer: denial of service via crafted email address header

A flaw was found in Nodemailer. This vulnerability allows a denial of service DoS via a crafted email address header that triggers infinite recursion in the address parser...

7.5CVSS6AI score0.00469EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/12/18 8:40 a.m.45 views

CVE-2025-14874 Nodemailer: nodemailer: denial of service via crafted email address header

A flaw was found in Nodemailer. This vulnerability allows a denial of service DoS via a crafted email address header that triggers infinite recursion in the address parser...

7.5CVSS0.00469EPSS
SaveExploits1References5
OSV
OSV
added 2025/12/18 8:40 a.m.7 views

CVE-2025-14874 Nodemailer: nodemailer: denial of service via crafted email address header

A flaw was found in Nodemailer. This vulnerability allows a denial of service DoS via a crafted email address header that triggers infinite recursion in the address parser...

7.5CVSS7AI score
SaveExploits0References8
CVE
CVE
added 2025/12/18 8:40 a.m.172 views

CVE-2025-14874

Nodemailer CVE-2025-14874 is a DoS vulnerability in the Nodemailer library where a crafted email address header triggers infinite recursion in the address parser. Affected product: Nodemailer (Node.js). Root cause: address parser recursion leading to denial of service. Impact: high availability l...

7.5CVSS6AI score0.00469EPSS
SaveExploits1References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/18 8:40 a.m.11 views

CVE-2025-14874

A flaw was found in Nodemailer. This vulnerability allows a denial of service DoS via a crafted email address header that triggers infinite recursion in the address parser. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat...

7.5CVSS5.9AI score0.00469EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/12/12 12:00 a.m.10 views

Apple多款产品 安全漏洞

Apple iOS is an operating system for mobile devices, Apple watchOS is an operating system for smartwatches, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in several Apple products that stems from insufficient checks on email header parsing, which could...

7.5CVSS5.9AI score0.0056EPSS
SaveExploits0References7
OSV
OSV
added 2025/12/01 8:44 p.m.11 views

GHSA-RCMH-QJQH-P98V Nodemailer’s addressparser is vulnerable to DoS caused by recursive calls

Summary A DoS can occur that immediately halts the system due to the use of an unsafe function. Details According to RFC 5322, nested group structures a group inside another group are not allowed. Therefore, in lib/addressparser/index.js, the email address parser performs flattening when nested...

7.5CVSS6.2AI score0.00469EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2025/12/01 12:00 a.m.10 views

PT-2025-52207

Name of the Vulnerable Software and Affected Versions Nodemailer affected versions not specified Description A flaw exists in Nodemailer that can lead to a denial of service DoS. This occurs due to a crafted email address header triggering infinite recursion within the address parser...

7.5CVSS6.3AI score0.00469EPSS
SaveExploits1References20
Tenable Nessus
Tenable Nessus
added 2025/11/20 12:00 a.m.4 views

TencentOS Server 4: python3.12 (TSSA-2024:0709)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0709 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

5.5CVSS7AI score0.011EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2002-1556

Malware in sbrugna...

5CVSS6.2AI score0.01387EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2006-6923

Malware in sbrugna...

10CVSS6.4AI score0.04603EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2016-5848

Malware in sbrugna...

4.3CVSS4.8AI score0.01481EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2012-4655

Malware in sbrugna...

3.5CVSS6AI score0.01269EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2005-4440

Malware in sbrugna...

5.1CVSS6.4AI score0.03087EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2014-2979

Malware in sbrugna...

6.8CVSS6.6AI score0.05285EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2016-5786

Malware in sbrugna...

7.5CVSS7.8AI score0.02201EPSS
SaveExploits2References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2010-4664

Malware in sbrugna...

5CVSS6.1AI score0.01628EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2006-3168

Malware in sbrugna...

5CVSS6.4AI score0.01491EPSS
SaveExploits0References7
Rows per page
Query Builder