Lucene search
K

54 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 12:28 p.m.5 views

CVE-2023-40599

Regular expression Denial-of-Service ReDoS exists in multiple add-ons for Mailform Pro CGI 4.3.1.3 and earlier, which allows a remote unauthenticated attacker to cause a denial-of-service condition. Affected add-ons are as follows: call/call.js, prefcodeadv/search.cgi, estimate/estimate.js,...

7.5CVSS7AI score0.00676EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:57 a.m.3 views

CVE-2022-38400

Mailform Pro CGI 4.3.1 and earlier allow a remote unauthenticated attacker to obtain the user input data by having a use of the product to access a specially crafted URL...

5.9CVSS7AI score0.00329EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2015-0893

Malware in sbrugna...

6.8CVSS6.4AI score0.01581EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-36853

Malicious code in bioql PyPI...

7.5CVSS4.8AI score0.00781EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-27990

Malicious code in bioql PyPI...

6.3CVSS5AI score0.00146EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-45157

Malicious code in bioql PyPI...

7.5CVSS5.5AI score0.00676EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-40985

Malicious code in bioql PyPI...

5.9CVSS4.9AI score0.00329EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/05/28 7:17 a.m.9 views

CVE-2025-41441

Mailform Pro CGI prior to 4.3.4 generates error messages containing sensitive information, which may allow a remote unauthenticated attacker to obtain coupon codes. This vulnerability only affects products that use the coupon feature...

6.3CVSS6.8AI score0.00146EPSS
Exploits0References1
NVD
NVD
added 2025/05/26 7:15 a.m.10 views

CVE-2025-41441

Mailform Pro CGI prior to 4.3.4 generates error messages containing sensitive information, which may allow a remote unauthenticated attacker to obtain coupon codes. This vulnerability only affects products that use the coupon feature...

6.3CVSS0.00146EPSS
Exploits0References2
OSV
OSV
added 2025/05/26 7:15 a.m.1 views

CVE-2025-41441

Mailform Pro CGI prior to 4.3.4 generates error messages containing sensitive information, which may allow a remote unauthenticated attacker to obtain coupon codes. This vulnerability only affects products that use the coupon feature...

5.3CVSS5.8AI score
Exploits0References2
Cvelist
Cvelist
added 2025/05/26 6:27 a.m.11 views

CVE-2025-41441

Mailform Pro CGI prior to 4.3.4 generates error messages containing sensitive information, which may allow a remote unauthenticated attacker to obtain coupon codes. This vulnerability only affects products that use the coupon feature...

6.3CVSS0.00146EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/05/26 6:27 a.m.6 views

CVE-2025-41441

Mailform Pro CGI prior to 4.3.4 generates error messages containing sensitive information, which may allow a remote unauthenticated attacker to obtain coupon codes. This vulnerability only affects products that use the coupon feature...

6.3CVSS6.8AI score0.00146EPSS
Exploits0References2
CVE
CVE
added 2025/05/26 6:27 a.m.46 views

CVE-2025-41441

CVE-2025-41441 affects Mailform Pro CGI versions prior to 4.3.4. The vulnerability stems from error messages that disclose sensitive information (CWE-209), which may allow a remote unauthenticated attacker to obtain coupon codes in systems that enable the coupon feature. Impact is limited to prod...

6.3CVSS4.2AI score0.00146EPSS
Exploits0References2Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/05/26 5:22 a.m.3 views

Mailform Pro CGI generating error messages containing sensitive information

Overview Mailform Pro CGI provided by SYNCK GRAPHICA contains a vulnerability listed below. Generation of error message containing sensitive information CWE-209 - CVE-2025-41441 Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the...

9.8CVSS6.6AI score0.01243EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/05/26 12:0 a.m.1 views

SYNCK GRAPHICA Mailform Pro CGI 安全漏洞

SYNCK GRAPHICA Mailform Pro CGI is a mail form from SYNCK GRAPHICA Japan. It can be used as a multiple transmission, questionnaire form, and application form. A security vulnerability exists in SYNCK GRAPHICA Mailform Pro CGI versions prior to 4.3.4, which originates from an error message...

6.3CVSS4.7AI score0.00146EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/05/26 12:0 a.m.2 views

PT-2025-22903 · Unknown · Mailform Pro Cgi

Name of the Vulnerable Software and Affected Versions: Mailform Pro CGI versions prior to 4.3.4 Description: The issue allows a remote unauthenticated attacker to obtain coupon codes due to error messages containing sensitive information. This only affects products that use the coupon feature...

6.3CVSS4.2AI score0.00146EPSS
Exploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/05/26 12:0 a.m.13 views

JVN#39546799: Mailform Pro CGI generating error messages containing sensitive information

Mailform Pro CGI provided by SYNCK GRAPHICA contains a vulnerability listed below. Generation of error message containing sensitive information CWE-209 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N Base Score 6.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Base Score 3.7...

6.3CVSS6.8AI score0.00146EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 3:49 a.m.4 views

CVE-2023-32610

Mailform Pro CGI 4.3.1.2 and earlier allows a remote unauthenticated attacker to cause a denial-of-service DoS condition...

7.5CVSS7AI score0.00781EPSS
Exploits0References1
OSV
OSV
added 2023/08/25 3:15 a.m.1 views

CVE-2023-40599

Regular expression Denial-of-Service ReDoS exists in multiple add-ons for Mailform Pro CGI 4.3.1.3 and earlier, which allows a remote unauthenticated attacker to cause a denial-of-service condition. Affected add-ons are as follows: call/call.js, prefcodeadv/search.cgi, estimate/estimate.js,...

7.5CVSS6.4AI score0.00676EPSS
Exploits0References2
NVD
NVD
added 2023/08/25 3:15 a.m.10 views

CVE-2023-40599

Regular expression Denial-of-Service ReDoS exists in multiple add-ons for Mailform Pro CGI 4.3.1.3 and earlier, which allows a remote unauthenticated attacker to cause a denial-of-service condition. Affected add-ons are as follows: call/call.js, prefcodeadv/search.cgi, estimate/estimate.js,...

7.5CVSS7.5AI score0.00676EPSS
Exploits0References2
Rows per page
Query Builder