Lucene search
K

48 matches found

Positive Technologies
Positive Technologies
added 2025/04/17 12:0 a.m.4 views

PT-2025-18966 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue has been found in the APPEND Command Handler component, which can be exploited remotely. The manipulation leads to a buffer overflow. Recommendations: For PCMan FTP Server version...

9.8CVSS7.5AI score0.00649EPSS
Exploits1References15
SUSE CVE
SUSE CVE
added 2023/02/15 6:11 a.m.1 views

SUSE CVE-2007-4211

The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...

6CVSS6.8AI score0.01763EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2023/01/06 10:1 p.m.33 views

CVE-2022-45935

Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions...

5.5CVSS5.1AI score0.00125EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2023/01/06 12:31 p.m.22 views

Apache James server allows an attacker with local access to access private user data in transit

Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions...

5.5CVSS5.3AI score0.00125EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2023/01/06 10:15 a.m.13 views

CVE-2022-45935

Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions...

5.5CVSS5.3AI score0.00125EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/01/06 9:33 a.m.7 views

CVE-2022-45935 Apache James server: Temporary File Information Disclosure

Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user data in transit. Vulnerable components includes the SMTP stack and IMAP APPEND command. This issue affects Apache James server version 3.7.2 and prior versions...

6.5AI score0.00125EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/01/06 12:0 a.m.3 views

PT-2023-14802 · Apache · Apache James Server

Name of the Vulnerable Software and Affected Versions: Apache James server versions 3.7.2 and prior versions Description: The issue allows an attacker with local access to access private user data in transit due to the usage of temporary files with insecure permissions by the Apache James server...

5.5CVSS7.1AI score0.00125EPSS
Exploits0References9
OSV
OSV
added 2022/05/18 11:3 a.m.3 views

OESA-2022-1656 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

7.8CVSS6.9AI score0.01144EPSS
Exploits2References3
OSV
OSV
added 2022/05/07 7:15 p.m.0 views

AZL-9737 CVE-2022-1616 affecting package vim for versions less than 8.2.4925-1

Use after free in appendcommand in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

7.8CVSS7.4AI score0.00166EPSS
Exploits1References1
OSV
OSV
added 2022/05/07 7:15 p.m.1 views

DEBIAN-CVE-2022-1616

Use after free in appendcommand in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

7.8CVSS7.9AI score0.00166EPSS
Exploits1References1
OSV
OSV
added 2022/05/07 7:15 p.m.0 views

UBUNTU-CVE-2022-1616

Use after free in appendcommand in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

7.8CVSS7.3AI score0.00166EPSS
Exploits1References8
CNVD
CNVD
added 2016/08/23 12:0 a.m.1 views

Easy FTP Server APPE Remote Code Execution Vulnerability

Easy FTP Server is a free green software that does not require installation and is prohibited for commercial use Supports multiple users, multiple permissions, multiple directories, supports web access, supports Windows system service mode. Easy FTP Server has a security vulnerability. Due to the...

7.7AI score
Exploits0References1
Prion
Prion
added 2009/09/08 10:30 a.m.13 views

Buffer overflow

Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long first argument to the APPEND command, a different vector than CVE-2008-1497 a...

4CVSS7.8AI score0.24083EPSS
Exploits2References4Affected Software1
Cvelist
Cvelist
added 2009/09/08 10:0 a.m.14 views

CVE-2008-7182

Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long first argument to the APPEND command, a different vector than CVE-2008-1497 a...

7.3AI score0.1114EPSS
Exploits1References4
NVD
NVD
added 2008/09/11 9:6 p.m.17 views

CVE-2008-4041

The IMAP server in Softalk Mail Server formerly WorkgroupMail 8.5.1.431 allows remote authenticated users to cause a denial of service resource consumption and daemon crash via a long IMAP APPEND command with certain repeated parameters...

4CVSS6.3AI score0.06443EPSS
Exploits0References5
0day.today
0day.today
added 2008/06/30 12:0 a.m.13 views

Surgemail 39e-1 Post Auth IMAP Remote Buffer Overflow DoS

Exploit for unknown platform in category dos / poc ========================================================= Surgemail 39e-1 Post Auth IMAP Remote Buffer Overflow DoS ========================================================= !/usr/bin/python Surgemail version 39e-1 - 0day Post Auth IMAP Buffer...

7AI score
Exploits0
Exploit DB
Exploit DB
added 2008/06/30 12:0 a.m.41 views

Surgemail 39e-1 - (Authenticated) IMAP Remote Buffer Overflow (Denial of Service) (PoC)

!/usr/bin/python Surgemail version 39e-1 - 0day Post Auth IMAP Buffer overflow DoS. Discovered by: Travis Warren The IMAP service contains a buffer overflow in the APPEND command. import socket s = socket.socketsocket.AFINET, socket.SOCKSTREAM buffer = '\x41' 3000 s.connect'192.168.0.103',143...

7.4AI score
Exploits0
Prion
Prion
added 2007/08/08 2:17 a.m.19 views

Command injection

The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...

6CVSS6.2AI score0.01763EPSS
Exploits0References9Affected Software1
OSV
OSV
added 2007/08/08 2:17 a.m.2 views

DEBIAN-CVE-2007-4211

The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...

6CVSS6.8AI score0.01763EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2007/08/08 2:17 a.m.25 views

CVE-2007-4211

The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...

6CVSS5.9AI score0.01763EPSS
Exploits0References1
Rows per page
Query Builder