Lucene search
K

23 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2008-3809

Malware in sbrugna...

4.3CVSS6AI score0.00802EPSS
Exploits2References15
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2003-0434

Malware in sbrugna...

4.6CVSS6.1AI score0.00061EPSS
Exploits0References8
OSV
OSV
added 2025/09/26 1:9 p.m.3 views

OESA-2025-2347 apache-mime4j security update

Java stream based MIME message parser. Security Fixes: A vulnerability was found in Apache James MIME4J up to 0.8.8. It has been rated as problematic.Using CWE to declare the problem leads to CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have...

5.5CVSS6.5AI score0.00009EPSS
Exploits0References2
OSV
OSV
added 2024/02/27 5:15 p.m.2 views

DEBIAN-CVE-2024-21742

Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message. This can be exploited by an attacker to add unintended headers to MIME messages...

5.3CVSS6.6AI score0.00636EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 6:7 a.m.1 views

SUSE CVE-2008-3823

Cross-site scripting XSS vulnerability in MIME/MIME/Contents.php in the MIME library in Horde 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via the filename of a MIME attachment in an e-mail message...

4.3CVSS6AI score0.00802EPSS
Exploits2References3
RedhatCVE
RedhatCVE
added 2022/05/20 11:39 p.m.17 views

CVE-2008-3823

Cross-site scripting XSS vulnerability in MIME/MIME/Contents.php in the MIME library in Horde 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via the filename of a MIME attachment in an e-mail message...

4.3CVSS5.7AI score0.00802EPSS
Exploits2References3
The Hacker News
The Hacker News
added 2020/04/22 12:49 p.m.1 views

Zero-Day Warning: It's Possible to Hack iPhones Just by Sending Emails

Watch out Apple users! The default mailing app pre-installed on millions of iPhones and iPads has been found vulnerable to two critical flaws that attackers are exploiting in the wild, at least, from the last two years to spy on high-profile victims. The flaws could eventually let remote hackers...

6.5AI score
Exploits0
OSV
OSV
added 2018/07/20 4:20 p.m.0 views

GHSA-WRVR-8MPX-R7PP mime Regular Expression Denial of Service when MIME lookup performed on untrusted user input

Affected versions of mime are vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input. Recommendation Update to version 2.0.3 or later...

7.5CVSS7.1AI score0.00433EPSS
Exploits1References5
OpenVAS
OpenVAS
added 2010/08/21 12:0 a.m.18 views

Debian: Security Advisory (DSA-2082-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.5AI score0.00718EPSS
Exploits0References3
Cvelist
Cvelist
added 2009/09/17 10:0 a.m.21 views

CVE-2009-3237

Multiple cross-site scripting XSS vulnerabilities in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware 1.1 before 1.1.6 and 1.2 before 1.2.4; and Groupware Webmail Edition 1.1 before 1.1.6 and 1.2 before 1.2.4; allow remote attackers to inject arbitrary web script or HT...

5.5AI score0.0076EPSS
Exploits0References12
NVD
NVD
added 2008/09/12 4:56 p.m.14 views

CVE-2008-3823

Cross-site scripting XSS vulnerability in MIME/MIME/Contents.php in the MIME library in Horde 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via the filename of a MIME attachment in an e-mail message...

4.3CVSS5.5AI score0.00802EPSS
Exploits2References12
Prion
Prion
added 2008/09/12 4:56 p.m.17 views

Cross site scripting

Cross-site scripting XSS vulnerability in MIME/MIME/Contents.php in the MIME library in Horde 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via the filename of a MIME attachment in an e-mail message...

4.3CVSS5.7AI score0.00802EPSS
Exploits2References12Affected Software1
UbuntuCve
UbuntuCve
added 2008/09/12 4:56 p.m.19 views

CVE-2008-3823

Cross-site scripting XSS vulnerability in MIME/MIME/Contents.php in the MIME library in Horde 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via the filename of a MIME attachment in an e-mail message...

4.3CVSS5.9AI score0.00802EPSS
Exploits2References1
Cvelist
Cvelist
added 2008/09/12 4:0 p.m.21 views

CVE-2008-3823

Cross-site scripting XSS vulnerability in MIME/MIME/Contents.php in the MIME library in Horde 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via the filename of a MIME attachment in an e-mail message...

5.3AI score0.00802EPSS
Exploits2References12
CVE
CVE
added 2008/09/12 4:0 p.m.63 views

CVE-2008-3823

Technical details of CVE-2008-3823 are not publicly available in the provided connected documents. The Initial Description indicates an XSS in Horde's MIME library (MIME/Contents.php) for attachments in emails, but no further specifics or fixes are included here. Monitor for updates.

4.3CVSS5.3AI score0.00802EPSS
Exploits2References12Affected Software1
Tenable Nessus
Tenable Nessus
added 2004/09/29 12:0 a.m.28 views

Debian DSA-339-1 : semi - insecure temporary file

NOTE: due to a combination of administrative problems, this advisory was erroneously released with the identifier 'DSA-337-1'. DSA-337-1 correctly refers to an earlier advisory regarding gtksee. semi, a MIME library for GNU Emacs, does not take appropriate security precautions when creating...

4.6CVSS5.6AI score0.00061EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2004/08/18 2:54 p.m.18 views

Low: Red Hat Security Advisory: semi security update

Updated semi packages that fix vulnerabilities in flim temporary file handling are now available. The semi package includes a MIME library for GNU Emacs and XEmacs used by the wl mail package. Tatsuya Kinoshita discovered a vulnerability in flim, an emacs library for working with Internet message...

2.1CVSS5.8AI score0.00121EPSS
Exploits0References3
NVD
NVD
added 2003/08/18 4:0 a.m.18 views

CVE-2003-0440

The 1 semi MIME library 1.14.5 and earlier, and 2 wemi 1.14.0 and possibly other versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files...

4.6CVSS6.3AI score0.00061EPSS
Exploits0References4
OSV
OSV
added 2003/08/18 4:0 a.m.2 views

DEBIAN-CVE-2003-0440

The 1 semi MIME library 1.14.5 and earlier, and 2 wemi 1.14.0 and possibly other versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files...

4.6CVSS6.4AI score0.00061EPSS
Exploits0References1
OSV
OSV
added 2003/08/18 4:0 a.m.6 views

CVE-2003-0440

The 1 semi MIME library 1.14.5 and earlier, and 2 wemi 1.14.0 and possibly other versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files...

6.2AI score
Exploits0References6
Rows per page
Query Builder