5629 matches found
Vulnerability of mime/multipart packages, net/textproto programming language in Golang, allowing attackers to trigger a denial-of-service attack
The vulnerability of the mime/multipart and net/text proto types in the Golang programming language is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability can allow a remote attacker to cause service failures...
OESA-2024-1479 apache-mime4j security update
Java stream based MIME message parser. Security Fixes: Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message. This can be exploited by an attacker to add unintended headers to MIME messages. CVE-2024-21742...
SUSE-SU-2024:1317-1 Security update for emacs
This update for emacs fixes the following issues: - CVE-2024-30203: Fixed denial of service via MIME contents bsc1222053 - CVE-2024-30204: Fixed denial of service via LaTeX preview in e-mail attachments bsc1222052 - CVE-2024-30205: Fixed Org mode considering contents of remote files as trusted...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : emacs (SUSE-SU-2024:1294-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1294-1 advisory. - CVE-2024-30203: Fixed treating inline MIME contents as trusted bsc1222053 - CVE-2024-30204:...
SUSE-SU-2024:1294-1 Security update for emacs
This update for emacs fixes the following issues: - CVE-2024-30203: Fixed treating inline MIME contents as trusted bsc1222053 - CVE-2024-30204: Fixed LaTeX preview enabled by default for e-mail attachments bsc1222052 - CVE-2024-30205: Fixed Org mode considering contents of remote files as trusted...
CVE-2024-23735
Cross Site Scripting XSS vulnerability in in the S/MIME certificate upload functionality of the User Profile pages in savignano S/Notify before 4.0.0 for Confluence allows attackers to manipulate user data via specially crafted certificate...
CVE-2024-23734
Cross Site Request Forgery vulnerability in in the upload functionality of the User Profile pages in savignano S/Notify before 2.0.1 for Bitbucket allow attackers to replace S/MIME certificate or PGP keys for arbitrary users via crafted link...
CVE-2024-23734
Cross Site Request Forgery vulnerability in in the upload functionality of the User Profile pages in savignano S/Notify before 2.0.1 for Bitbucket allow attackers to replace S/MIME certificate or PGP keys for arbitrary users via crafted link...
CVE-2024-23735: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in in the S/MIME certificate upload functionality of the User Profile pages in savignano S/Notify before 4.0.0 for Confluence allows attackers to manipulate user data via specially crafted certificate...
CVE-2024-23734
Cross Site Request Forgery vulnerability in in the upload functionality of the User Profile pages in savignano S/Notify before 2.0.1 for Bitbucket allow attackers to replace S/MIME certificate or PGP keys for arbitrary users via crafted link...
CVE-2024-23734
Cross Site Request Forgery vulnerability in in the upload functionality of the User Profile pages in savignano S/Notify before 2.0.1 for Bitbucket allow attackers to replace S/MIME certificate or PGP keys for arbitrary users via crafted link...
CVE-2024-23735
Cross Site Scripting XSS vulnerability in in the S/MIME certificate upload functionality of the User Profile pages in savignano S/Notify before 4.0.0 for Confluence allows attackers to manipulate user data via specially crafted certificate...
CVE-2024-23735
A Cross Site Scripting (XSS) vulnerability exists in the S/MIME certificate upload functionality of the User Profile pages in savignano S/Notify for Confluence versions prior to 4.0.0 . Attackers can exploit this flaw by providing a specially crafted certificate to manipulate user data . To resol...
CVE-2024-23734: Cross-Site Request Forgery (CSRF)
Cross Site Request Forgery vulnerability in in the upload functionality of the User Profile pages in savignano S/Notify before 2.0.1 for Bitbucket allow attackers to replace S/MIME certificate or PGP keys for arbitrary users via crafted link...
Trust Boundary Violation
emacs is vulnerable to Trust Boundary Violation. The vulnerability is due to a flaw in the processing logic of Emacs Gnus, allows attackers to potentially exploit trust assumptions in Emacs Gnus, as it incorrectly treats inline MIME contents as trusted without appropriate validation...
MGASA-2024-0104 Updated emacs packages fix security vulnerabilities
In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23. CVE-2024-30202 In Emacs before 29.3, Gnus treats inline MIME contents as trusted. CVE-2024-30203 In Emacs before 29.3, LaTeX preview is enabled by default for e-mail...
Updated emacs packages fix security vulnerabilities
In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23. CVE-2024-30202 In Emacs before 29.3, Gnus treats inline MIME contents as trusted. CVE-2024-30203 In Emacs before 29.3, LaTeX preview is enabled by default for e-mail...
Unrestricted Upload Of File With Dangerous Type
ZITADEL is vulnerable to Unrestricted Upload of File with Dangerous Type. The vulnerability is caused by bypassing the ContentTypeAllowed function in asset.go with a malicious avatar image upload. Files with MIME types not intended for use as avatar images are allowed. To be vulnerable, a differe...
OESA-2024-1333 apache-mime4j security update
Java stream based MIME message parser. Security Fixes: Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message. This can be exploited by an attacker to add unintended headers to MIME messages. CVE-2024-21742...
