Lucene search
K

305 matches found

Prion
Prion
added 2010/07/08 6:30 p.m.11 views

Buffer overflow

Multiple buffer underflows in the base64 decoder in base64.c in 1 bogofilter and 2 bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service heap memory corruption and application crash via an e-mail message with invalid base64 data that begins with an = equals...

5CVSS7.3AI score0.03441EPSS
Exploits0References20Affected Software1
NVD
NVD
added 2010/07/08 6:30 p.m.13 views

CVE-2010-2494

Multiple buffer underflows in the base64 decoder in base64.c in 1 bogofilter and 2 bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service heap memory corruption and application crash via an e-mail message with invalid base64 data that begins with an = equals...

5CVSS6.8AI score0.03441EPSS
Exploits0References20
Cvelist
Cvelist
added 2010/07/08 6:0 p.m.36 views

CVE-2010-2494

Multiple buffer underflows in the base64 decoder in base64.c in 1 bogofilter and 2 bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service heap memory corruption and application crash via an e-mail message with invalid base64 data that begins with an = equals...

6.6AI score0.03441EPSS
Exploits0References20
UbuntuCve
UbuntuCve
added 2010/07/08 12:0 a.m.22 views

CVE-2010-2494

Multiple buffer underflows in the base64 decoder in base64.c in 1 bogofilter and 2 bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service heap memory corruption and application crash via an e-mail message with invalid base64 data that begins with an = equals...

5CVSS6AI score0.03441EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2010/05/28 12:0 a.m.14 views

Mandriva Update for dovecot MDVSA-2010:104 (dovecot)

Check for the Version of dovecot OpenVAS Vulnerability Test Mandriva Update for dovecot MDVSA-2010:104 dovecot Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

5CVSS6.5AI score0.03078EPSS
Exploits0References2
NVD
NVD
added 2010/05/20 5:30 p.m.24 views

CVE-2010-0745

Unspecified vulnerability in Dovecot 1.2.x before 1.2.11 allows remote attackers to cause a denial of service CPU consumption via long headers in an e-mail message...

5CVSS6.4AI score0.03078EPSS
Exploits0References10
NVD
NVD
added 2010/03/27 7:7 p.m.7 views

CVE-2010-1132

The mlfienvrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message...

9.3CVSS7.4AI score0.08509EPSS
Exploits1References19
UbuntuCve
UbuntuCve
added 2010/03/27 7:7 p.m.14 views

CVE-2010-1132

The mlfienvrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message...

9.3CVSS6AI score0.08509EPSS
Exploits1References2
Cvelist
Cvelist
added 2010/03/26 9:0 p.m.19 views

CVE-2010-1132

The mlfienvrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message...

7.3AI score0.08509EPSS
Exploits1References19
Debian CVE
Debian CVE
added 2010/03/26 9:0 p.m.10 views

CVE-2010-1132

The mlfienvrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message...

9.3CVSS7.7AI score0.08509EPSS
Exploits1
Cvelist
Cvelist
added 2010/01/28 8:0 p.m.19 views

CVE-2004-2766

Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02 allows remote attackers to obtain unspecified "access" to e-mail via a crafted e-mail message, related to a "session hijacking" issue, a different vulnerability than CVE-2005-2022 and CVE-2006-5486...

6.1AI score0.01428EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2009/12/23 6:30 p.m.21 views

CVE-2009-4404

Unspecified vulnerability in t-prot TOFU Protection before 2.8 allows remote attackers to cause a denial of service via unspecified vectors related to the "--maxlines" option and a crafted email message. NOTE: some of these details are obtained from third party information...

4.3CVSS5.9AI score0.01215EPSS
Exploits0References1
Prion
Prion
added 2009/12/23 6:30 p.m.10 views

Design/Logic Flaw

Unspecified vulnerability in t-prot TOFU Protection before 2.8 allows remote attackers to cause a denial of service via unspecified vectors related to the "--maxlines" option and a crafted email message. NOTE: some of these details are obtained from third party information...

4.3CVSS7.1AI score0.01215EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2009/12/23 6:30 p.m.14 views

CVE-2009-4404

Unspecified vulnerability in t-prot TOFU Protection before 2.8 allows remote attackers to cause a denial of service via unspecified vectors related to the "--maxlines" option and a crafted email message. NOTE: some of these details are obtained from third party information...

4.3CVSS6.6AI score0.01215EPSS
Exploits0References4
Cvelist
Cvelist
added 2009/12/23 6:0 p.m.16 views

CVE-2009-4404

Unspecified vulnerability in t-prot TOFU Protection before 2.8 allows remote attackers to cause a denial of service via unspecified vectors related to the "--maxlines" option and a crafted email message. NOTE: some of these details are obtained from third party information...

6.6AI score0.01215EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2009/12/23 6:0 p.m.19 views

CVE-2009-4404

Unspecified vulnerability in t-prot TOFU Protection before 2.8 allows remote attackers to cause a denial of service via unspecified vectors related to the "--maxlines" option and a crafted email message. NOTE: some of these details are obtained from third party information...

4.3CVSS5.5AI score0.01215EPSS
Exploits0
Saint
Saint
added 2009/09/30 12:0 a.m.15 views

Click Logger

Added: 09/30/2009 Background This tool runs an exploit server which simply returns an error page and logs which users visited it. It can be used to find out which users were susceptible to clicking on the link in an e-mail message. Limitations The target must be present in the license key but is...

1.9AI score
Exploits0
Prion
Prion
added 2009/06/25 5:30 p.m.22 views

Design/Logic Flaw

Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a multipart/alternative e-mail message containing a text/enhanced part that triggers access to an incorrect object type...

9.3CVSS8.4AI score0.03799EPSS
Exploits0References17Affected Software2
UbuntuCve
UbuntuCve
added 2009/06/25 5:30 p.m.23 views

CVE-2009-2210

Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a multipart/alternative e-mail message containing a text/enhanced part that triggers access to an incorrect object type...

9.3CVSS6.2AI score0.03799EPSS
Exploits0References1
securityvulns
securityvulns
added 2009/05/05 12:0 a.m.50 views

[DSECRG-09-038] Sun Glassfish Woodstock Project - Linked XSS Vulnerability

Digital Security Research Group DSecRG Advisory DSECRG-09-038 Original advisory: http://dsecrg.com/pages/vul/show.php?id=138 Application: Sun Glassfish Woodstock Project part of Glassfish Enterprise Server Versions Affected: 4.2 Vendor URL: https://woodstock.dev.java.net/ Bug: Linked XSS...

6.5AI score
Exploits0
Rows per page
Query Builder