241 matches found
CVE-2022-39052
An external attacker is able to send a specially crafted email with many recipients and trigger a potential DoS of the system...
UBUNTU-CVE-2022-39052
An external attacker is able to send a specially crafted email with many recipients and trigger a potential DoS of the system...
CVE-2022-39052 DoS attack using email
An external attacker is able to send a specially crafted email with many recipients and trigger a potential DoS of the system...
Admin Shouldn't Be Able to Withdraw Aleady Claimable Vested Token
Lines of code Vulnerability details Impact It is not ideal for admins to be able to withdraw any vested amount that is ALREADY claimable by vesting recipients to keep vesting recipient's or investors or employees incentives alligned with admins project. The point I want to say is that, current...
CVE-2022-23238
Linux deployments of StorageGRID formerly StorageGRID Webscale versions 11.6.0 through 11.6.0.2 deployed with a Linux kernel version less than 4.7.0 are susceptible to a vulnerability which could allow a remote unauthenticated attacker to view limited metrics information and modify alert email...
Netapp StorageGRID 安全漏洞
Netapp StorageGRID is a suite of object storage solutions from Network Appliance Netapp USA. A security vulnerability exists in StorageGRID formerly StorageGRID Webscale versions 11.6.0 through 11.6.0.2. A remote attacker could exploit the vulnerability to view limited metrics information and...
Samsung mobile devices 安全漏洞
Samsung Finder is a feature of Samsung mobile devices in South Korea.A security vulnerability exists in Samsung Finder that stems from the fact that when implicit intent invocation is used, no restrictions are placed on the intent message recipient, and an attacker could use the vulnerability to...
GHSA-9V72-P5P3-9W65 Exposure of Sensitive Information to an Unauthorized Actor in Jenkins-mailer-plugin
jenkins-mailer-plugin before version 1.20 is vulnerable to an information disclosure while using the feature to send emails to a dynamically created list of users based on the changelogs. This could in some cases result in emails being sent to people who have no user account in Jenkins, and in ra...
CVE-2022-23940
SuiteCRM through 7.12.1 and 8.x through 8.0.1 allows Remote Code Execution. Authenticated users with access to the Scheduled Reports module can achieve this by leveraging PHP deserialization in the emailrecipients property. By using a crafted request, they can create a malicious report, containin...
Deserialization of untrusted data
SuiteCRM through 7.12.1 and 8.x through 8.0.1 allows Remote Code Execution. Authenticated users with access to the Scheduled Reports module can achieve this by leveraging PHP deserialization in the emailrecipients property. By using a crafted request, they can create a malicious report, containin...
CVE-2022-23940
SuiteCRM through 7.12.1 and 8.x through 8.0.1 allows Remote Code Execution. Authenticated users with access to the Scheduled Reports module can achieve this by leveraging PHP deserialization in the emailrecipients property. By using a crafted request, they can create a malicious report, containin...
OTRS AG OTRSCustomContactFields Information Disclosure Vulnerability
OTRS AG OTRSCustomContactFields is an OTRS custom contact fields plugin from OTRS Germany.An information disclosure vulnerability exists in OTRS AG OTRSCustomContactFields, which could be exploited by an attacker to obtain the full list of recipients in a contact field from a customer...
GitLab Enterprise Edition和GitLab Community Edition 安全漏洞
GitLab is a self-hosted, Git version control system project repository application developed using Ruby on Rails by GitLab, Inc. The application can be used to access a project's file content, commit history, bug list, etc. An access control error vulnerability exists in GitLab CE/EE, which stems...
PT-2022-24697 · Alt Linux · Alt Linux
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An external attacker can send a specially crafted email with many recipients to potentially trigger a Denial of Service DoS of the system. There is no...
AXIS OS 5.51 < 5.51.7.5 / 6.0 < 6.50.5.5 / 7.0 < 8.40.4.3 / 9.0 < 9.80.3.5 / 10.0 < 10.8 Multiple Vulnerabilities
The firmware version running on the remote host is vulnerable to multiple vulnerabilities, including the following: - User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashes and data leakage. CVE-2021-31986 - A...
CVE-2021-31987
A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass blocked network recipients...
CVE-2021-31987
A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass blocked network recipients...
CVE-2021-31987
A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass blocked network recipients...
CVE-2021-31987
CVE-2021-31987 affects Axis OS (embedded OS used in Axis devices). A user-controlled parameter in the SMTP test functionality is not properly validated, enabling bypass of blocked network recipients. Public disclosures describe this alongside related issues (CVE-2021-31986, CVE-2021-31988) in Axi...
PT-2021-19616 · Axis Communications +1 · Axis Os +3
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a user-controlled parameter in the SMTP test functionality that is not correctly validated. This allows an attacker to bypass...