Lucene search
+L

1770 matches found

Cvelist
Cvelist
added 2023/05/18 12:00 a.m.36 views

CVE-2023-31597

An issue in Zammad v5.4.0 allows attackers to bypass e-mail verification using an arbitrary address and manipulate the data of the generated user. Attackers are also able to gain unauthorized access to existing tickets...

6.9AI score0.00425EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2023/05/16 9:08 a.m.57 views

Moderate: Red Hat Security Advisory: emacs security and bug fix update

An update for emacs is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

7.8CVSS7.3AI score0.00659EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2023/05/12 12:00 a.m.18 views

Python <= 2.7.18, 3.x <= 3.12.3 Security Bypass Vulnerability - Windows

Python is prone to a security bypass vulnerability in the e-mail module. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5.3CVSS5.5AI score0.02527EPSS
SaveExploits1References6
OpenVAS
OpenVAS
added 2023/05/12 12:00 a.m.22 views

Python <= 2.7.18, 3.x <= 3.12.3 Security Bypass Vulnerability - Mac OS X

Python is prone to a security bypass vulnerability in the e-mail module. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5.3CVSS5.5AI score0.02527EPSS
SaveExploits1References6
NVD
NVD
added 2023/05/11 12:15 p.m.23 views

CVE-2023-31445

Cassia Access controller before 2.1.1.2203171453, was discovered to have a unprivileged -information disclosure vulnerability that allows read-only users have the ability to enumerate all other users and discover e-mail addresses, phone numbers, and privileges of all other users...

5.3CVSS5.3AI score0.01146EPSS
SaveExploits1References3
Debian
Debian
added 2023/05/04 5:32 p.m.23 views

[SECURITY] [DSA 5396-2] evolution update

------------------------------------------------------------------------- Debian Security Advisory DSA-5396-2 [email protected] https://www.debian.org/security/ Alberto Garcia May 04, 2023 https://www.debian.org/security/faq -...

6.8AI score
SaveExploits0
OSV
OSV
added 2023/05/02 12:00 a.m.24 views

ALSA-2023:2074 Important: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp, and the capability to read e-mail and news. Security Fixes: emacs: command injection vulnerability in org-mode CVE-2023-28617 For more details about the...

7.8CVSS8AI score0.00469EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2023/04/18 12:00 a.m.86 views

CVE-2023-27043

The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is...

6AI score0.02527EPSS
SaveExploits1References23
OSV
OSV
added 2023/04/18 12:00 a.m.23 views

CVE-2023-27043

The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is...

5.3CVSS5.5AI score
SaveExploits0References48
NVD
NVD
added 2023/04/15 2:15 a.m.24 views

CVE-2022-43699

OX App Suite before 7.10.6-rev30 allows SSRF because e-mail account discovery disregards the deny-list and thus can be attacked by an adversary who controls the DNS records of an external domain found in the host part of an e-mail address...

4.3CVSS4.7AI score0.00462EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2023/04/15 12:00 a.m.81 views

CVE-2018-17883

Removed by vendor...

6.1CVSS6.4AI score0.00443EPSS
SaveExploits0
Kitploit
Kitploit
added 2023/04/13 12:30 p.m.47 views

Pinacolada - Wireless Intrusion Detection System For Hak5's WiFi Coconut

Pinacolada looks for typical IEEE 802.11 attacks and then informs you about them as quickly as possible. All this with the help of Hak5's WiFi Coconut, which allows it to listen for threats on all 14 channels in the 2.4GHz range simultaneously. Supported 802.11 Attacks Attack | Type | Status...

6.9AI score
SaveExploits0References1
NVD
NVD
added 2023/03/02 9:15 p.m.46 views

CVE-2022-46501

Accruent LLC Maintenance Connection 2021 all & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function...

9.8CVSS9.8AI score0.00602EPSS
SaveExploits0References1
Prion
Prion
added 2023/03/02 9:15 p.m.29 views

Sql injection

Accruent LLC Maintenance Connection 2021 all & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function...

7.5CVSS9.8AI score0.00602EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/03/02 12:00 a.m.59 views

CVE-2022-46501

Accruent LLC Maintenance Connection 2021 all & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function...

10AI score0.00602EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/03/02 12:00 a.m.12 views

CVE-2022-46501

Accruent LLC Maintenance Connection 2021 all & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function...

8.5AI score0.00602EPSS
SaveExploits0References2
CVE
CVE
added 2023/03/02 12:00 a.m.87 views

CVE-2022-46501

CVE-2022-46501 affects Accruent LLC Maintenance Connection 2021 (all) and 2022.2. The vulnerability is a SQL injection in the E-Mail to Work Order function. The NVD entry lists a CVSS v3.1 base score of 9.8 (CRITICAL) with network access, no user interaction, and no privileges required, yielding ...

9.8CVSS9.8AI score0.00602EPSS
SaveExploits0References1Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 6:10 a.m.7 views

SUSE CVE-2007-5541

Unspecified vulnerability in Opera before 9.24, when using an "external" newsgroup or e-mail client, allows remote attackers to execute arbitrary commands via unknown vectors...

9.3CVSS7.8AI score0.04543EPSS
SaveExploits1References4
Securelist
Securelist
added 2023/02/07 8:00 a.m.30 views

Web beacons on websites and in e-mail

There is a vast number of trackers, which gather information about users activities online. For all intents and purposes, we have grown accustomed to online service providers, marketing agencies, and analytical companies tracking our every mouse click, our social posts, browser and streaming...

SaveExploits0
OpenVAS
OpenVAS
added 2023/01/31 12:00 a.m.11 views

Fedora: Security Advisory for seamonkey (FEDORA-2023-dfeb282345)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Rows per page
Query Builder