Lucene search
+L

8 matches found

osv_ubuntu
osv_ubuntu
•added 2026/02/06 8:16 p.m.•17 views

UBUNTU-CVE-2026-25727

time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are...

6.8CVSS5.9AI score0.00339EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2026/02/06 7:20 p.m.•18 views

CVE-2026-25727 time affected by a stack exhaustion denial of service attack

time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are...

6.8CVSS5.9AI score0.00339EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/02/06 7:20 p.m.•23 views

EUVD-2026-5587

time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are...

6.8CVSS6AI score0.00339EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2023/02/15 3:32 a.m.•17 views

SUSE CVE-2022-2226

An OpenPGP digital signature includes information about the date when the signature was created. When displaying an email that contains a digital signature, the email's date will be shown. If the dates were different, then Thunderbird didn't report the email as having an invalid signature. If an...

6.5CVSS8.7AI score0.00436EPSS
SaveExploits0References4
NVD
NVD
•added 2022/12/22 8:15 p.m.•16 views

CVE-2022-2226

An OpenPGP digital signature includes information about the date when the signature was created. When displaying an email that contains a digital signature, the email's date will be shown. If the dates were different, then Thunderbird didn't report the email as having an invalid signature. If an...

6.5CVSS0.00436EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2022/12/22 8:15 p.m.•19 views

DEBIAN-CVE-2022-2226

An OpenPGP digital signature includes information about the date when the signature was created. When displaying an email that contains a digital signature, the email's date will be shown. If the dates were different, then Thunderbird didn't report the email as having an invalid signature. If an...

6.5CVSS8.8AI score0.00436EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2022/07/04 12:00 a.m.•16 views

Thunderbird Signature Date Correlation Spamming

The vulnerability of Thunderbird email client stems from the lack of correlation between the date of the OpenPGP digital signature and the date of the email message. Exploiting this vulnerability could allow a remote attacker to perform a spamming attack...

6.4CVSS6.8AI score0.00436EPSS
SaveExploits0References7Affected Software5
RedHat Linux
RedHat Linux
•added 2022/07/01 1:31 a.m.•16 views

Mozilla: An email with a mismatching OpenPGP signature date was accepted as valid

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this issue of when an OpenPGP digital signature includes information about the date when the signature was created. When displaying an email that contains a digital signature, it will show the email's date. If the dat...

6.5CVSS7.3AI score0.00436EPSS
SaveExploits0References5
Rows per page
Query Builder