Lucene search
+L

51621 matches found

UbuntuCve
UbuntuCve
added 2026/09/02 12:00 a.m.7 views

CVE-2026-63435

Mail is an internet library for Ruby designed to handle email generati...

5.3CVSS5.8AI score0.00328EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/09/02 12:00 a.m.16 views

PT-2026-84668

Craft CMS before 5.10.11 fails to validate the admin flag during user registration, allowing it to persist from deactivated admin accounts. Attackers can register with a deactivated admin's email address to inherit administrator privileges when public registration and disabled email verification...

9.8CVSS5.9AI score0.00284EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/02 12:00 a.m.7 views

UBUNTU-CVE-2026-63435

Mail is an internet library for Ruby designed to handle email generati...

5.3CVSS5.8AI score0.00328EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/09/02 12:00 a.m.12 views

PT-2026-84814

Name of the Vulnerable Software and Affected Versions Cisco Secure Email affected versions not specified Description Insufficient validation of message integrity in the Secure/Multipurpose Internet Mail Extensions S/MIME decryption functionality allows an unauthenticated remote attacker to recove...

5.9CVSS6AI score0.00149EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2026/09/01 9:33 p.m.10 views

CVE-2026-84639

Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

9.1CVSS5.8AI score0.00323EPSS
SaveExploits0
OSV
OSV
added 2026/09/01 8:44 p.m.8 views

CVE-2026-73524 Cypht < 2.12.2 XSS via FROM Email Header in Contacts Module

Cypht before 2.12.2 contains a cross-site scripting vulnerability in the contacts module that allows remote attackers to execute arbitrary script content by embedding malicious payloads within angle brackets in the FROM email header. The sanitization logic removes only the first occurrence of eac...

5.1CVSS6.1AI score
SaveExploits0References7
Cvelist
Cvelist
added 2026/09/01 8:44 p.m.34 views

CVE-2026-73524 Cypht < 2.12.2 XSS via FROM Email Header in Contacts Module

Cypht before 2.12.2 contains a cross-site scripting vulnerability in the contacts module that allows remote attackers to execute arbitrary script content by embedding malicious payloads within angle brackets in the FROM email header. The sanitization logic removes only the first occurrence of eac...

6.1CVSS0.00253EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/01 8:44 p.m.12 views

EUVD-2026-69652

Cypht before 2.12.2 contains a cross-site scripting vulnerability in the contacts module that allows remote attackers to execute arbitrary script content by embedding malicious payloads within angle brackets in the FROM email header. The sanitization logic removes only the first occurrence of eac...

6.1CVSS6.1AI score0.00253EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/01 8:09 p.m.35 views

CVE-2026-63435 Mail: Email address spoofing via malformed RFC 2047 encoded-words

Mail is an internet library for Ruby designed to handle email generation, parsing, and sending. Prior to 2.9.1, Mail::Utilities.qvaluedecode and Mail::Utilities.bvaluedecode used a single Stringmatch and an overly greedy charset capture to decode only the first RFC 2047 encoded-word and mishandle...

5.3CVSS0.00328EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/01 8:09 p.m.16 views

CVE-2026-63435

Mail (Ruby gem for email generation, parsing, and sending) is vulnerable to email address spoofing via malformed RFC 2047 encoded-words prior to version 2.9.1 . The root cause lies in Mail::Utilities.q_value_decode and Mail::Utilities.b_value_decode in lib/mail/utilities.rb, which used a single S...

5.3CVSS5.7AI score0.00328EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/01 8:09 p.m.11 views

CVE-2026-63435 Mail: Email address spoofing via malformed RFC 2047 encoded-words

Mail is an internet library for Ruby designed to handle email generation, parsing, and sending. Prior to 2.9.1, Mail::Utilities.qvaluedecode and Mail::Utilities.bvaluedecode used a single Stringmatch and an overly greedy charset capture to decode only the first RFC 2047 encoded-word and mishandle...

5.3CVSS5.7AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/09/01 8:09 p.m.11 views

CVE-2026-63435 Mail: Email address spoofing via malformed RFC 2047 encoded-words

Mail is an internet library for Ruby designed to handle email generation, parsing, and sending. Prior to 2.9.1, Mail::Utilities.qvaluedecode and Mail::Utilities.bvaluedecode used a single Stringmatch and an overly greedy charset capture to decode only the first RFC 2047 encoded-word and mishandle...

5.3CVSS5.7AI score0.00328EPSS
SaveExploits0References4
Circl
Circl
added 2026/09/01 8:01 p.m.7 views

CVE-2020-12272

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:59+00:00| seen| https://t.me/hackingAttack/38673 2026-09-02 01:02:21+00:00| seen| https://t.me/hackingAttack/38673 2026-09-06 13:00:05+00:00| published-proof-of-concept| https://t.me/hackingAttack/38673 2026-09-07 01:00:14+00:00|...

5.3CVSS6AI score0.02189EPSS
SaveExploits1References1
NVD
NVD
added 2026/09/01 3:17 p.m.9 views

CVE-2026-84114

A vulnerability has been found in Cleo Harmony up to 5.8.1.10. Impacted is the function LocalUserUtil.getNativeUserByAssertions of the component SAML Authentication. Such manipulation of the argument Email leads to improper authentication. The attack can be executed remotely. The exploit has been...

6.5CVSS0.00342EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/01 2:45 p.m.23 views

CVE-2026-84114

Cleo Harmony versions up to 5.8.1.10 contain an improper authentication vulnerability in the SAML Authentication component, specifically in the function LocalUserUtil.getNativeUserByAssertions . Manipulation of the Email argument allows a remote attacker with low privileges to bypass authenticati...

6.5CVSS6.1AI score0.00342EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/01 2:45 p.m.32 views

CVE-2026-84114 Cleo Harmony SAML Authentication LocalUserUtil.getNativeUserByAssertions improper authentication

A vulnerability has been found in Cleo Harmony up to 5.8.1.10. Impacted is the function LocalUserUtil.getNativeUserByAssertions of the component SAML Authentication. Such manipulation of the argument Email leads to improper authentication. The attack can be executed remotely. The exploit has been...

6.5CVSS0.00342EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/01 2:45 p.m.9 views

EUVD-2026-69237

A vulnerability has been found in Cleo Harmony up to 5.8.1.10. Impacted is the function LocalUserUtil.getNativeUserByAssertions of the component SAML Authentication. Such manipulation of the argument Email leads to improper authentication. The attack can be executed remotely. The exploit has been...

6.5CVSS5.4AI score0.00342EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/09/01 10:37 a.m.9 views

CVE-2026-82853

A flaw was found in Nodemailer. This vulnerability allows a remote attacker to inject arbitrary Simple Mail Transfer Protocol SMTP commands due to improper sanitization of carriage return and line feed characters in the transport name option. This can lead to email spoofing and phishing attacks...

6.9CVSS6AI score0.00735EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/09/01 10:37 a.m.9 views

CVE-2026-82661

A flaw was found in Nodemailer, an email sending library. This vulnerability allows a remote attacker with control over specific list comment parameters to inject arbitrary message headers into generated email messages. By failing to sanitize carriage return and line feed CRLF characters, an...

5.4CVSS6AI score0.0019EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/09/01 10:31 a.m.8 views

CVE-2024-58379

A flaw was found in Nodemailer. A remote attacker can exploit a regular expression denial of service ReDoS vulnerability by sending specially crafted emails containing malicious data URLs or embedded attachments. This can cause the email parsing process to hang, leading to a denial of service for...

6.9CVSS5.9AI score0.00304EPSS
SaveExploits0References5
Rows per page
Query Builder