CVE-2020-7046

lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in command parameters, as demonstrated by the unauthenticated triggering of a submission-login infinite loop...

CVE-2020-7046

CVE-2020-7046 affects Dovecot components lib-smtp (submission-login) and lmtp in 2.3.9 prior to 2.3.9.3, where truncated UTF-8 data in command parameters can be triggered unauthenticated, causing a submission-login infinite loop (DoS). Public references in multiple advisories confirm the vulnerab...

CVE-2020-7046

lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in command parameters, as demonstrated by the unauthenticated triggering of a submission-login infinite loop...

CVE-2020-7046

lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in command parameters, as demonstrated by the unauthenticated triggering of a submission-login infinite loop...

CVE-2020-7046

lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in command parameters, as demonstrated by the unauthenticated triggering of a submission-login infinite loop...

PT-2020-19354 · Dovecot +1 · Dovecot +1

Name of the Vulnerable Software and Affected Versions: Dovecot versions 2.3.9 through 2.3.9.2 Description: The issue is related to the mishandling of truncated UTF-8 data in command parameters by lib-smtp in submission-login and lmtp. This can be demonstrated by the unauthenticated triggering of ...

CVE-2020-8841

An issue was discovered in TestLink 1.9.19. The relationtype parameter of the lib/requirements/reqSearch.php endpoint is vulnerable to authenticated SQL Injection...

Cross site scripting

htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c aka callback parameter...

PT-2020-20317

Name of the Vulnerable Software and Affected Versions TestLink version 1.9.19 Description An issue was discovered that allows for authenticated SQL Injection through the relation type parameter of the "lib/requirements/reqSearch.php" endpoint. Recommendations For TestLink version 1.9.19, avoid...

CVE-2020-8841: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in TestLink 1.9.19. The relationtype parameter of the lib/requirements/reqSearch.php endpoint is vulnerable to authenticated SQL Injection...

CVE-2020-8823: Improper Neutralization of Input During Web Page Generation

htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c aka callback parameter...

PT-2020-20251

Name of the Vulnerable Software and Affected Versions Simplejobscript.com SJS versions 1.66 and earlier Description An issue was discovered in the job applications search function, allowing for unauthenticated SQL injection. The job id parameter is vulnerable, and the issue is related to the...

DEBIAN-CVE-2019-9674

Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service resource consumption via a ZIP bomb...

CVE-2019-9674

The CVE-2019-9674 entry affects Python’s Lib/zipfile.py up to Python 3.7.2. It enables remote attackers to cause a denial of service via a ZIP bomb, triggering resource consumption. The vulnerability originates from how zip files are processed in lib/zipfile.py, leading to potential exhaustion of...

CVE-2019-9674

Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service resource consumption via a ZIP bomb...

CVE-2019-9674

Removed by vendor...

CVE-2019-9674: Uncontrolled Resource Consumption

Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service resource consumption via a ZIP bomb...

PT-2020-7654

Name of the Vulnerable Software and Affected Versions Ex Libris ALEPH 500 versions 18.1 through 20 Description The issue allows remote attackers to inject arbitrary web script or HTML via the find, lib, or sid parameters in the cgi-bin/tag m.cgi endpoint. This enables attackers to perform...

CVE-2014-3718: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in cgi-bin/tagm.cgi in Ex Libris ALEPH 500 Integrated library management system 18.1 and 20 allow remote attackers to inject arbitrary web script or HTML via the 1 find, 2 lib, or 3 sid parameter...

PT-2020-7655

Name of the Vulnerable Software and Affected Versions Ex Libris ALEPH 500 versions 18.1 through 20 Description The issue concerns multiple SQL injection vulnerabilities in the cgi-bin/review m.cgi component of Ex Libris ALEPH 500. These vulnerabilities allow remote attackers to execute arbitrary...