Lucene search
+L

386 matches found

OSV
OSV
•added 2021/02/05 11:54 a.m.•18 views

MGASA-2021-0070 Updated mutt packages fix a security vulnerability

It was discovered that Mutt incorrectly handled certain email messages. An attacker could possibly use this issue to cause a denial of service because rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service mailbox unavailability by sending email messages with sequence...

6.5CVSS6.5AI score0.02796EPSS
SaveExploits0References6
Prion
Prion
•added 2021/01/28 7:15 p.m.•24 views

Design/Logic Flaw

The Electron framework lets you write cross-platform desktop applications using JavaScript, HTML and CSS. In affected versions of Electron IPC messages sent from the main process to a subframe in the renderer process, through webContents.sendToFrame, event.reply or when using the remote module, c...

6.4CVSS6.4AI score0.01725EPSS
SaveExploits0References5Affected Software1
Prion
Prion
•added 2021/01/28 3:15 a.m.•25 views

Heap overflow

An issue was discovered on Accfly Wireless Security IR Camera System 720P with software versions v3.10.73 through v4.15.77. There is an unauthenticated heap-based buffer overflow in the function CNetClientTalk::OprMsg during incoming message handling...

7.5CVSS9.7AI score0.01672EPSS
SaveExploits2References1Affected Software1
CNNVD
CNNVD
•added 2020/12/23 12:00 a.m.•15 views

Bitcoinsv Resource Management Error Vulnerability

Bitcoinsv is a software implementation of the original Bitcoin protocol by the Bitcoinsv Association. The software can be used to build Bitcoin infrastructure. A security vulnerability exists in Bitcoin SV before 0.1.1 that allows uncontrolled resource consumption when receiving messages with...

7.5CVSS7.1AI score0.01044EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/18 12:00 a.m.•2 views

CVE-2020-14224: Out-of-bounds Write

A vulnerability in the MIME message handling of the HCL Notes v9 client could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the Notes application or inject code into the system which would execute with the...

10CVSS6.5AI score0.02253EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2020/12/16 12:00 a.m.•8 views

CVE-2020-4846

IBM Security Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 190290...

4CVSS5.3AI score0.00978EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2020/12/16 12:00 a.m.•20 views

HCL Notes Buffer Overflow Vulnerability (CNVD-2021-13705)

HCL Notes is a local email client from HCL India. HCL Notes has a security vulnerability that originates from a flaw in MIME message handling that could be exploited by an unauthenticated attacker to cause a stack buffer overflow. A remote attacker could be allowed to exploit the vulnerability to...

10CVSS7.3AI score0.02253EPSS
SaveExploits0References1
NVD
NVD
•added 2020/12/14 4:15 p.m.•36 views

CVE-2020-14268

A vulnerability in the MIME message handling of the Notes client versions 9 and 10 could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the client or inject code into the system which would execute with the...

10CVSS9.7AI score0.02253EPSS
SaveExploits0References1
NVD
NVD
•added 2020/12/14 4:15 p.m.•33 views

CVE-2020-14244

A vulnerability in the MIME message handling of the Domino server versions 9 and 10 could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the server or inject code into the system which would execute with th...

10CVSS9.7AI score0.02987EPSS
SaveExploits0References1
Prion
Prion
•added 2020/12/14 4:15 p.m.•27 views

Stack overflow

A vulnerability in the MIME message handling of the Notes client versions 9 and 10 could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the client or inject code into the system which would execute with the...

10CVSS9.6AI score0.02253EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2020/12/14 3:49 p.m.•72 views

CVE-2020-14268

CVE-2020-14268 affects the Notes client (versions 9 and 10) and stems from a weakness in MIME message handling. The vulnerability could be exploited by an unauthenticated attacker to trigger a stack buffer overflow, potentially crashing the client or allowing code to execute with the client’s pri...

10CVSS9.6AI score0.02253EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/12/14 3:49 p.m.•45 views

CVE-2020-14268

A vulnerability in the MIME message handling of the Notes client versions 9 and 10 could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the client or inject code into the system which would execute with the...

9.7AI score0.02253EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/14 12:00 a.m.•3 views

CVE-2020-14244: Out-of-bounds Write

A vulnerability in the MIME message handling of the Domino server versions 9 and 10 could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the server or inject code into the system which would execute with th...

10CVSS6.5AI score0.02987EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/14 12:00 a.m.•2 views

CVE-2020-14268: Out-of-bounds Write

A vulnerability in the MIME message handling of the Notes client versions 9 and 10 could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the client or inject code into the system which would execute with the...

10CVSS6.5AI score0.02253EPSS
SaveExploits0References2
OSV
OSV
•added 2020/12/01 5:07 p.m.•4 views

OPENSUSE-SU-2020:2141-1 Security update for mutt

This update for mutt fixes the following issues: - CVE-2020-28896: incomplete connection termination could lead to sending credentials over unencrypted connections bsc1179035 - Avoid that message with a million tiny parts can freeze MUA for several minutes bsc1179113 This update was imported from...

5.3CVSS5.7AI score0.02351EPSS
SaveExploits0References4
OSV
OSV
•added 2020/11/30 3:59 p.m.•12 views

SUSE-SU-2020:3568-1 Security update for mutt

This update for mutt fixes the following issues: - CVE-2020-28896: incomplete connection termination could lead to sending credentials over unencrypted connections bsc1179035 - Avoid that message with a million tiny parts can freeze MUA for several minutes bsc1179113...

5.3CVSS5.4AI score0.02351EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2020/09/04 2:25 a.m.•14 views

CVE-2020-3495 Cisco Jabber for Windows Message Handling Arbitrary Code Execution Vulnerability

A vulnerability in Cisco Jabber for Windows could allow an authenticated, remote attacker to execute arbitrary code. The vulnerability is due to improper validation of message contents. An attacker could exploit this vulnerability by sending specially crafted Extensible Messaging and Presence...

9.9CVSS8.2AI score0.59923EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2020/09/04 12:00 a.m.•45 views

Cisco Jabber for Windows Message Handling Arbitrary Code Execution (cisco-sa-jabber-UyTKCPGg)

According to its self-reported version, Cisco Jabber is affected by a arbitrary code execution vulnerability. The vulnerability is due to improper validation of message contents. An attacker could exploit this vulnerability by sending specially crafted Extensible Messaging and Presence Protocol...

9.9CVSS9.1AI score0.59923EPSS
SaveExploits0References3
CISA
CISA
•added 2020/09/03 12:00 a.m.•19 views

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in Cisco products. An attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities see the Cisco Security Advisories page. The Cybersecurity and...

7.8AI score
SaveExploits0References6
Cisco
Cisco
•added 2020/09/02 4:00 p.m.•109 views

Cisco Jabber for Windows Message Handling Arbitrary Code Execution Vulnerability

A vulnerability in Cisco Jabber for Windows could allow an authenticated, remote attacker to execute arbitrary code. The vulnerability is due to improper validation of message contents. An attacker could exploit this vulnerability by sending specially crafted Extensible Messaging and Presence...

9.9CVSS9.3AI score0.59923EPSS
SaveExploits0References1
Rows per page
Query Builder