Lucene search
+L

1933 matches found

Positive Technologies
Positive Technologies
added 2023/11/14 12:0 a.m.7 views

PT-2023-6993 · Siemens · Scalance M826-2 Shdsl-Router +16

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM RM1224 LTE4G EU versions V8.0 RUGGEDCOM RM1224 LTE4G NAM versions V8.0 SCALANCE M804PB versions V8.0 SCALANCE M812-1 ADSL-Router versions V8.0 SCALANCE M816-1 ADSL-Router versions V8.0 SCALANCE M826-2 SHDSL-Router versions V8.0...

5.9CVSS6.6AI score0.00879EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
added 2023/10/20 12:0 a.m.2925 views

Exim < 4.96.2 Multiple Vulnerabilities

According to its banner, the version of Exim running on the remote host is prior to 4.96.2. It is, therefore, potentially affected by multiple vulnerabilities: - Improper Neutralization of Special Elements CVE-2023-42117 - dnsdb Out-Of-Bounds Read CVE-2023-42119 Note that Nessus has not tested fo...

9.8CVSS6.9AI score0.05673EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/10/20 12:0 a.m.43 views

Exim < 4.96.1 Multiple Vulnerabilities

According to its banner, the version of Exim running on the remote host is prior to 4.96.1. It is, therefore, potentially affected by multiple vulnerabilities: - NTLM Challenge Out-Of-Bounds Read CVE-2023-42114 - AUTH Out-Of-Bounds Write CVE-2023-42115 - SMTP Challenge Stack-based Buffer Overflow...

9.8CVSS7.4AI score0.28084EPSS
SaveExploits5References4
BDU FSTEC
BDU FSTEC
added 2023/10/04 12:0 a.m.8 views

The vulnerability of the NTLM (New Technology LAN Manager) protocol implemented by the Exim mail server allows a hacker to gain unauthorized access to protected information.

The vulnerability of the NTLM New Technology LAN Manager protocol implemented by the Exim mail server is related to the occurrence of operations outside the buffer in memory during request processing. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized acce...

3.7CVSS7.2AI score0.28084EPSS
SaveExploits0References15Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/10/04 12:0 a.m.11 views

The vulnerability of the SMTP mail server service in Exim allows a hacker to execute arbitrary code.

The vulnerability of the Exim mail server’s SMTP service relates to the ability to write data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by injecting the AUTHOR command remotely...

10CVSS8.6AI score0.09961EPSS
SaveExploits5References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/10/04 12:0 a.m.7 views

The vulnerability of the Exim SMTP mail server allows a hacker to execute arbitrary code.

The vulnerability of the Exim mail server’s SMTP service is related to the execution of operations beyond the buffer boundaries in memory, as a result of incorrect processing of special elements. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

8.1CVSS8.4AI score0.05673EPSS
SaveExploits0References15Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/10/04 12:0 a.m.6 views

The vulnerability of the Exim SMTP mail server allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Exim mail server’s SMTP service is related to the issue of operations going beyond the buffer in memory when implementing a DNSDB-style search mechanism. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected...

3.1CVSS7AI score0.01593EPSS
SaveExploits0References16Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/10/04 12:0 a.m.7 views

The vulnerability of the SMTP protocol implementation in a mail server allows a hacker to execute arbitrary code.

The vulnerability of the SMTP protocol implementation in email servers is related to the execution of operations beyond the buffer boundaries in memory when processing requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.1CVSS8.7AI score0.03158EPSS
SaveExploits2References14Affected Software5
OSV
OSV
added 2023/09/28 12:0 a.m.6 views

UBUNTU-CVE-2023-42116

Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling o...

9.8CVSS7.9AI score0.03158EPSS
SaveExploits2References5
NVD
NVD
added 2023/09/18 8:15 p.m.23 views

CVE-2023-40221

The absence of filters when loading some sections in the web application of the vulnerable device allows potential attackers to inject malicious code that will be interpreted when a legitimate user accesses the web section MAIL SERVER where the information is displayed. Injection can be done on...

8.8CVSS8.7AI score0.00534EPSS
SaveExploits0References1
OSV
OSV
added 2023/09/18 8:15 p.m.8 views

CVE-2023-40221

The absence of filters when loading some sections in the web application of the vulnerable device allows potential attackers to inject malicious code that will be interpreted when a legitimate user accesses the web section MAIL SERVER where the information is displayed. Injection can be done on...

8.8CVSS5.8AI score0.00534EPSS
SaveExploits0References1
Prion
Prion
added 2023/09/18 8:15 p.m.35 views

Design/Logic Flaw

UNSUPPPORTED WHEN ASSIGNED The absence of filters when loading some sections in the web application of the vulnerable device allows potential attackers to inject malicious code that will be interpreted when a legitimate user accesses the web section MAIL SERVER where the information is displayed...

6.8CVSS9AI score0.00534EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/09/18 7:59 p.m.27 views

CVE-2023-40221 Socomec MOD3GP-SY-120K Code Injection

The absence of filters when loading some sections in the web application of the vulnerable device allows potential attackers to inject malicious code that will be interpreted when a legitimate user accesses the web section MAIL SERVER where the information is displayed. Injection can be done on...

8.8CVSS8.8AI score0.00534EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/09/14 6:15 p.m.6 views

CVE-2023-40779

An issue in IceWarp Mail Server Deep Castle 2 v.13.0.1.2 allows a remote attacker to execute arbitrary code via a crafted request to the URL...

6.1CVSS6.8AI score0.01355EPSS
SaveExploits0References4
OSV
OSV
added 2023/09/14 6:15 p.m.8 views

CVE-2023-40779

An issue in IceWarp Mail Server Deep Castle 2 v.13.0.1.2 allows a remote attacker to execute arbitrary code via a crafted request to the URL...

6.1CVSS6.1AI score0.01355EPSS
SaveExploits0References1
NVD
NVD
added 2023/09/14 6:15 p.m.31 views

CVE-2023-40779

An issue in IceWarp Mail Server Deep Castle 2 v.13.0.1.2 allows a remote attacker to execute arbitrary code via a crafted request to the URL...

6.1CVSS6.6AI score0.01355EPSS
SaveExploits0References1
Prion
Prion
added 2023/09/14 6:15 p.m.26 views

Design/Logic Flaw

An issue in IceWarp Mail Server Deep Castle 2 v.13.0.1.2 allows a remote attacker to execute arbitrary code via a crafted request to the URL...

5.8CVSS6.6AI score0.01355EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/09/14 12:0 a.m.93 views

CVE-2023-40779

IceWarp Mail Server Deep Castle 2 (version 13.0.1.2) is affected by an open redirect vulnerability discovered in the Nuclei template CVE-2023-40779. A crafted URL can redirect victims to attacker-controlled domains, enabling credential-phishing risks. The connected documents consistently describe...

6.1CVSS6.7AI score0.01355EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/14 12:0 a.m.13 views

CVE-2023-40779

An issue in IceWarp Mail Server Deep Castle 2 v.13.0.1.2 allows a remote attacker to execute arbitrary code via a crafted request to the URL...

7.8AI score0.01355EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/09/14 12:0 a.m.8 views

PT-2023-27634 · Icewarp · Icewarp Mail Server Deep Castle 2

Name of the Vulnerable Software and Affected Versions: IceWarp Mail Server Deep Castle 2 version 13.0.1.2 Description: An issue in IceWarp Mail Server Deep Castle 2 allows a remote attacker to execute arbitrary code via a crafted request to the URL. Recommendations: For IceWarp Mail Server Deep...

6.1CVSS6.7AI score0.01355EPSS
SaveExploits0References5
Rows per page
Query Builder