Lucene search
+L

837 matches found

Vulnrichment
Vulnrichment
•added 2024/10/16 8:55 p.m.•15 views

CVE-2024-47889 Action Mailer has possible ReDoS vulnerability in block_format

Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. Carefully crafted text can cause the blockformat helper to...

8.7CVSS6.8AI score0.00937EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2024/10/16 8:55 p.m.•36 views

CVE-2024-47889

Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. Carefully crafted text can cause the blockformat helper to...

8.7CVSS5.3AI score0.00937EPSS
SaveExploits0
Mend
Mend
•added 2024/10/16 8:55 p.m.•2 views

CVE-2024-47889

Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. Carefully crafted text can cause the blockformat helper to...

8.7CVSS0.00937EPSS
SaveExploits0References10
OSV
OSV
•added 2024/10/16 8:55 p.m.•26 views

CVE-2024-47889 Action Mailer has possible ReDoS vulnerability in block_format

Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. Carefully crafted text can cause the blockformat helper to...

8.7CVSS5.2AI score
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/16 12:00 a.m.•1 views

CVE-2024-47889: Inefficient Regular Expression Complexity

Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. Carefully crafted text can cause the blockformat helper to...

8.7CVSS5.7AI score0.00937EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/15 11:35 p.m.•29 views

GHSA-H47H-MWP9-C6Q6 Possible ReDoS vulnerability in block_format in Action Mailer

There is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. This vulnerability has been assigned the CVE identifier CVE-2024-47889. Impact ------ Carefully crafted text can cause the blockformat helper to take an unexpected amount of time, possibly resulting in a DoS...

8.7CVSS5.3AI score0.00937EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2024/10/15 11:35 p.m.•29 views

Possible ReDoS vulnerability in block_format in Action Mailer

There is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. This vulnerability has been assigned the CVE identifier CVE-2024-47889. Impact ------ Carefully crafted text can cause the blockformat helper to take an unexpected amount of time, possibly resulting in a DoS...

8.7CVSS9.3AI score0.00937EPSS
SaveExploits0References3Affected Software1
GitLab Advisory Database
GitLab Advisory Database
•added 2024/10/15 12:00 a.m.•37 views

Possible ReDoS vulnerability in block_format in Action Mailer

There is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. This vulnerability has been assigned the CVE identifier CVE-2024-47889. Impact ------ Carefully crafted text can cause the blockformat helper to take an unexpected amount of time, possibly resulting in a DoS...

8.7CVSS9.3AI score0.00937EPSS
SaveExploits0References5Affected Software1
RubySec
RubySec
•added 2024/10/15 12:00 a.m.•28 views

Possible ReDoS vulnerability in block_format in Action Mailer

There is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. This vulnerability has been assigned the CVE identifier CVE-2024-47889. Impact Carefully crafted text can cause the blockformat helper to take an unexpected amount of time, possibly resulting in a DoS vulnerabilit...

8.7CVSS6.9AI score0.00937EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/10/15 12:00 a.m.•14 views

PT-2024-7931

Name of the Vulnerable Software and Affected Versions Action Mailer versions 3.0.0 through 6.1.7.8 Action Mailer versions 7.0.0 through 7.0.8.4 Action Mailer versions 7.1.0 through 7.1.4.0 Action Mailer versions 7.2.0 through 7.2.1.0 Description The issue is related to the block format helper in...

9.8CVSS6.2AI score0.0246EPSS
SaveExploits5References86
OpenVAS
OpenVAS
•added 2024/08/14 12:00 a.m.•52 views

WordPress Post SMTP Mailer/Email Log Plugin < 2.8.8 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpexperts:postsmtp"; ifdescription...

7.2CVSS6.1AI score0.00941EPSS
SaveExploits2References1
OpenVAS
OpenVAS
•added 2024/08/14 12:00 a.m.•65 views

WordPress Post SMTP Mailer/Email Log Plugin < 2.8.7 Multiple Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpexperts:postsmtp"; ifdescription...

9.8CVSS6.7AI score0.90339EPSS
SaveExploits10References4
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:45 p.m.•7 views

Malicious code in action-mailer_cache_delivery (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/11 4:05 p.m.•40 views

CVE-2023-52233 WordPress POST SMTP Mailer plugin <= 2.8.6 - Broken Access Control on API vulnerability

Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log.This issue affects Post SMTP Mailer/Email Log: from n/a through 2.8.6...

8.6CVSS0.00367EPSS
SaveExploits0References1
CVE
CVE
•added 2024/06/11 4:05 p.m.•107 views

CVE-2023-52233

The CVE-2023-52233 entry concerns the WordPress plugin Post SMTP Mailer/Email Log (versions n/a–2.8.6). The authenticated note in Patchstack indicates a Missing Authorization/ Broken Access Control on the API, exploitable by an unauthenticated actor. Affects the plugin’s API surface, allowing una...

9.8CVSS5.8AI score0.00367EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/06/11 4:05 p.m.•23 views

CVE-2023-52233 WordPress POST SMTP Mailer plugin <= 2.8.6 - Broken Access Control on API vulnerability

Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log.This issue affects Post SMTP Mailer/Email Log: from n/a through 2.8.6...

8.6CVSS7AI score0.00367EPSS
SaveExploits0References1
OSV
OSV
•added 2024/06/11 4:05 p.m.•16 views

CVE-2023-52233 WordPress POST SMTP Mailer plugin <= 2.8.6 - Broken Access Control on API vulnerability

Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log.This issue affects Post SMTP Mailer/Email Log: from n/a through 2.8.6...

8.6CVSS5.9AI score
SaveExploits0References4
CNNVD
CNNVD
•added 2024/06/11 12:00 a.m.•18 views

WordPress plugin Post SMTP Mailer/Email Log security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPre...

9.8CVSS6.7AI score0.00367EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/06/11 12:00 a.m.•16 views

PT-2024-14497 · Unknown · Post Smtp Mailer/Email Log

Name of the Vulnerable Software and Affected Versions: Post SMTP Mailer/Email Log versions n/a through 2.8.6 Description: The issue is related to a Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log. Recommendations: For Post SMTP Mailer/Email Log versions n/a through...

9.8CVSS6.7AI score0.00367EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/11 12:00 a.m.•2 views

CVE-2023-52233: Missing Authorization

Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log.This issue affects Post SMTP Mailer/Email Log: from n/a through 2.8.6...

9.8CVSS5.8AI score0.00367EPSS
SaveExploits0References1
Rows per page
Query Builder