Lucene search
K

14 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux - уязвимость в thunderbird

When requesting an OpenPGP key from a WKD server, an incorrect padding size was used, which could allow a network observer to determine the length of the requested email address. This vulnerability was fixed in Thunderbird 136 and Thunderbird 128.8...

5.3CVSS5.8AI score0.00049EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2025/03/12 5:5 a.m.1 views

SUSE CVE-2025-26695

When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could have learned the length of the requested email address. This vulnerability was fixed in Thunderbird 136 and Thunderbird 128.8...

3.7CVSS5.8AI score0.00049EPSS
Exploits0References4
AlpineLinux
AlpineLinux
added 2025/03/10 7:15 p.m.0 views

CVE-2025-26695

When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could have learned the length of the requested email address. This vulnerability affects Thunderbird 136 and Thunderbird 128.8...

5.3CVSS4.7AI score0.00049EPSS
Exploits0References3
OSV
OSV
added 2025/03/10 7:15 p.m.2 views

DEBIAN-CVE-2025-26695

When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could have learned the length of the requested email address. This vulnerability was fixed in Thunderbird 136 and Thunderbird 128.8...

5.3CVSS5.2AI score0.00049EPSS
Exploits0References1
NVD
NVD
added 2025/03/10 7:15 p.m.10 views

CVE-2025-26695

When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could have learned the length of the requested email address. This vulnerability was fixed in Thunderbird 136 and Thunderbird 128.8...

5.3CVSS0.00049EPSS
Exploits0References3
OSV
OSV
added 2025/03/10 7:15 p.m.2 views

UBUNTU-CVE-2025-26695

When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could have learned the length of the requested email address. This vulnerability was fixed in Thunderbird 136 and Thunderbird 128.8...

5.3CVSS5.9AI score0.00049EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2022/09/29 12:0 a.m.2 views

PT-2022-21794 · Rdiffweb · Rdiffweb

Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.5.0a3 Description: The issue is related to the allocation of resources without limits or throttling, allowing users to insert an email longer than 255 characters. If a user signs up with an excessively long email...

7.5CVSS5.3AI score0.00334EPSS
Exploits1References9
Veracode
Veracode
added 2022/09/27 2:40 a.m.11 views

Denial Of Service (DoS)

rdiffweb is vulnerable to denial of service. The vulnerability exists in multiple functions in pageadmin.py , pagelogin.py and prefgeneral.py due to not validating the email length which allows an attacker to cause an application crash via a malicious input...

7.5CVSS7AI score0.00433EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2022/09/26 12:0 a.m.1 views

Rdiffweb 安全漏洞

Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. Provides quick access to your archives through an efficient web interface. A denial of service vulnerability exists in Rdiffweb versions prior to 2.4.8, which stems from not validating email length in...

7.5CVSS5.4AI score0.00433EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2022/09/26 12:0 a.m.1 views

PT-2022-21436 · Rdiffweb · Rdiffweb

Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.4.8 Description: The issue arises from improper handling of length parameter inconsistency, specifically in the validation of email length. This allows users to insert an email longer than 255 characters. If a use...

7.5CVSS5.4AI score0.00433EPSS
Exploits1References10
Hacker One
Hacker One
added 2017/08/26 12:36 p.m.174 views

Legal Robot: Email Length Verification

Hi Team, Hope you are good. I found your website app.legalrobot.com vulnerable to this vulnerability. Bug: Improper authentication - generic Description: Dont know much about the websites that how they stored email address.Email addresses are stored as VARCHAR128 But here your website legalrobot...

6.9AI score
Exploits0
Hacker One
Hacker One
added 2017/05/05 1:32 p.m.23 views

Paragon Initiative Enterprises: Improper validation of Email

1.goto https://bridge.cspr.ng/my/account here no rate limit present for email and display name,real name i just entered 1000 character length email in email field and it accepted also for the display name ,real name another there is no regular expression to check valid email if u give email as...

0.1AI score
Exploits0
Microsoft KB
Microsoft KB
added 2017/01/07 12:0 a.m.3 views

Update Rollup 10 for System Center 2012 R2 Orchestrator - Service Provider Foundation

Update Rollup 10 for System Center 2012 R2 Orchestrator - Service Provider Foundation Introduction This article describes the issues that are fixed in Update Rollup 10 for Microsoft System Center 2012 R2 Orchestrator - Service Provider Foundation. It also contains the installation instructions fo...

6.9AI score
Exploits0
Hacker One
Hacker One
added 2015/01/21 6:5 p.m.41 views

itBit Exchange: Email Length Verification

Hello ItBit Security Team! I am Simone, a sixteen years old Italian Security research, and I just want to share with you one of my finding on your website. NOTE:I reccomend you to read all this report with attwntion because it's a really particular vulnerability.. at first impact, this issue will...

6.5AI score
Exploits0
Rows per page
Query Builder