Lucene search
+L

194 matches found

NVD
NVD
•added 2026/09/18 4:17 p.m.•15 views

CVE-2025-36045

IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency...

4.3CVSS0.00262EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/18 3:41 p.m.•14 views

CVE-2025-36045 TS4300 Tape Library addresses security vulnerability

IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency...

4.3CVSS5.8AI score0.00262EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/18 3:41 p.m.•19 views

EUVD-2025-210956

IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency...

4.3CVSS5.8AI score0.00262EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/18 3:41 p.m.•36 views

CVE-2025-36045

IBM TS4300 Tape Library (versions 1.1.0.1 through 1.7.1.1) is affected by a denial-of-service vulnerability in its email service. Email-related functions in the web GUI and APIs did not enforce rate limiting, allowing an authenticated user to repeatedly invoke email-sending requests and generate ...

4.3CVSS5.8AI score0.00262EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/18 3:41 p.m.•50 views

CVE-2025-36045 TS4300 Tape Library addresses security vulnerability

IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency...

4.3CVSS0.00262EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/18 3:17 p.m.•16 views

CVE-2025-13882

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to imprope...

5.3CVSS0.00248EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/18 2:33 p.m.•31 views

CVE-2025-13882

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0–6.3.0.2, 6.2.4.0–6.2.4.4, and Standard Edition 6.2.4.0–6.2.4.4 could allow an unauthenticated remote attacker to cause a denial of service in the email service due to improper control of interaction frequency (CWE-799). The CVSS 3...

5.3CVSS5.8AI score0.00248EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/18 2:33 p.m.•52 views

CVE-2025-13882 Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to imprope...

5.3CVSS0.00248EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/18 2:33 p.m.•18 views

EUVD-2025-210934

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to imprope...

5.3CVSS5.8AI score0.00248EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/18 2:33 p.m.•21 views

CVE-2025-13882 Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to imprope...

5.3CVSS5.8AI score0.00248EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/18 12:00 a.m.•7 views

PT-2026-95406

Name of the Vulnerable Software and Affected Versions IBM Sterling Partner Engagement Manager Essentials Edition versions 6.3.0.0 through 6.3.0.2 IBM Sterling Partner Engagement Manager Essentials Edition versions 6.2.4.0 through 6.2.4.4 IBM Sterling Partner Engagement Manager Standard Edition...

5.3CVSS5.7AI score0.00248EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/18 12:00 a.m.•8 views

PT-2026-95440

Name of the Vulnerable Software and Affected Versions IBM TS4300 versions 1.1.0.1 through 1.7.1.1 Description An authenticated user can cause a denial of service in the email service. This occurs due to improper control of interaction frequency, which allows the service to be overwhelmed...

4.3CVSS5.7AI score0.00262EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•7 views

CVE-2025-13882: Improper Control of Interaction Frequency

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to imprope...

5.3CVSS5.8AI score0.00248EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•7 views

CVE-2025-36045: Improper Control of Interaction Frequency

IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency...

4.3CVSS5.8AI score0.00262EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/09 9:48 p.m.•44 views

CVE-2026-53961

CVE-2026-53961 concerns Discourse, an open-source discussion platform. Prior to the fixed versions, the AWS SES bounce webhook at POST /webhooks/aws did not bind SNS-signed messages to trusted TopicArn values, enabling any AWS account holder to publish forged Bounce notifications that revoke a ta...

6.5CVSS5.8AI score0.003EPSS
SaveExploits0References9Affected Software1
EUVD
EUVD
•added 2026/07/09 9:48 p.m.•25 views

EUVD-2026-42728

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, the AWS SES bounce webhook at POST /webhooks/aws verified that SNS messages were signed by Amazon but did not bind them to trusted TopicArn values, allowing any AWS account holder to publish...

6.5CVSS5.8AI score0.003EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
•added 2026/06/29 12:00 a.m.•16 views

The vulnerability of Microsoft Exchange Online for corporate email services, related to the lack of authentication, allows attackers to escalate their privileges.

The vulnerability of Microsoft Exchange Online corporate email service is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

9.6CVSS5.7AI score0.00689EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/22 12:00 a.m.•31 views

WordPress plugin FluentCRM 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

5.4CVSS6AI score0.00826EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/05/21 12:00 a.m.•36 views

PT-2026-42735

Name of the Vulnerable Software and Affected Versions FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution versions prior to 2.9.88 Description The plugin is susceptible to Blind Server-Side Request Forgery SSRF, a flaw where an attacker can...

5.4CVSS5.7AI score0.00826EPSS
SaveExploits0References14
NVD
NVD
•added 2026/05/19 10:16 a.m.•47 views

CVE-2026-35086

Improper Control of Generation of Code 'Code Injection' vulnerability in email services of Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue...

6.5CVSS0.0063EPSS
SaveExploits0References2
Rows per page
Query Builder