Lucene search
K

14 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-5307

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.0052EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:34 a.m.1 views

SUSE CVE-2018-1294

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

7.5CVSS7.4AI score0.0052EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2022/05/14 1:28 a.m.34 views

Improper Input Validation Apache Commons Email

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

7.5CVSS2.8AI score0.0052EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2022/05/14 1:28 a.m.0 views

GHSA-V7CM-W955-PJ6G Improper Input Validation Apache Commons Email

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

7.5CVSS5.9AI score0.0052EPSS
Exploits0References2
OSV
OSV
added 2018/03/20 5:29 p.m.0 views

UBUNTU-CVE-2018-1294

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

7.5CVSS5.8AI score0.0052EPSS
Exploits0References3
NVD
NVD
added 2018/03/20 5:29 p.m.14 views

CVE-2018-1294

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

7.5CVSS7.4AI score0.0052EPSS
Exploits0References1
OSV
OSV
added 2018/03/20 5:29 p.m.3 views

CVE-2018-1294

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

7.5CVSS5.8AI score
Exploits0References1
UbuntuCve
UbuntuCve
added 2018/03/20 5:29 p.m.27 views

CVE-2018-1294

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

7.5CVSS7AI score0.0052EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2018/03/20 5:0 p.m.22 views

CVE-2018-1294

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

7.5CVSS7.4AI score0.0052EPSS
Exploits0
Cvelist
Cvelist
added 2018/03/20 5:0 p.m.16 views

CVE-2018-1294

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

7.3AI score0.0052EPSS
Exploits0References1
CVE
CVE
added 2018/03/20 5:0 p.m.106 views

CVE-2018-1294

CVE-2018-1294 affects Apache Commons-Email: when unvalidated input is used as the Bounce Address and contains line breaks, email details (recipients, contents, etc.) may be manipulated. The risk is mitigated by upgrading to Commons-Email 1.5 or by stripping line breaks from data passed to Email.s...

7.5CVSS7.2AI score0.0052EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2018/02/24 11:25 p.m.6 views

MGASA-2018-0136 Updated apache-commons-email packages fix security vulnerability

Apache Commons-Email, from version 1.0 to 1.4 inclusive, does not properly validate bounce addresses. If a user of Commons-Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients,...

7.5CVSS7.4AI score0.0052EPSS
Exploits0References3
Mageia
Mageia
added 2018/02/24 11:25 p.m.37 views

Updated apache-commons-email packages fix security vulnerability

Apache Commons-Email, from version 1.0 to 1.4 inclusive, does not properly validate bounce addresses. If a user of Commons-Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients,...

7.5CVSS2.4AI score0.0052EPSS
Exploits0References2
Veracode
Veracode
added 2018/01/29 3:11 a.m.23 views

Information Disclosure

commons-email is vulnerable to information disclosure. If the Bounce Address is not validated on the applications side, commons-email allows line-breaks in the address. This means that its possible for the email details to be manipulated...

7.5CVSS7AI score0.0052EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder