Lucene search
+L

15303 matches found

Fedora
Fedora
added 2024/03/14 1:40 a.m.15 views

[SECURITY] Fedora 38 Update: thunderbird-115.8.1-1.fc38

Mozilla Thunderbird is a standalone mail and newsgroup client...

7.3AI score
SaveExploits0
Redos
Redos
added 2024/03/13 12:0 a.m.8 views

ROS-2-1996

2.1996 Multiple Exim Server Vulnerabilities 1. Vulnerability description: CVE-2020-28007 Vulnerability in the Exim message forwarding agent, related to a symbolic link in the Exim log directory. Exploitation of the vulnerability could allow an attacker to create a special symbolic link to a...

9.8CVSS9.8AI score0.61664EPSS
SaveExploits6
Redos
Redos
added 2024/03/13 12:0 a.m.16 views

ROS-2-1613

2.1613 Multiple Exim Server Vulnerabilities 1. Vulnerability description: CVE-2020-28007 A vulnerability in the Exim message forwarding agent, is related to a symbolic link in the Exim log directory. Exploitation of the vulnerability could allow an attacker to create a special symbolic link to a...

9.8CVSS9.1AI score0.61664EPSS
SaveExploits6
Redos
Redos
added 2024/03/13 12:0 a.m.16 views

ROS-2-1894

2.1894 Multiple Exim Server Vulnerabilities 1. Vulnerability description: CVE-2020-28007 A vulnerability in the Exim message forwarding agent, is related to a symbolic link in the Exim log directory. Exploitation of the vulnerability could allow an attacker to create a special symbolic link to a...

9.8CVSS10AI score0.61664EPSS
SaveExploits6
Redos
Redos
added 2024/03/13 12:0 a.m.30 views

ROS-2-988

2.988 Multiple Exim Server Vulnerabilities 1. Vulnerability description: CVE-2020-28007 A vulnerability in the Exim message forwarding agent, is related to a symbolic link in the Exim log directory. Exploitation of the vulnerability could allow an attacker to create a special symbolic link to a...

9.8CVSS9.1AI score0.61664EPSS
SaveExploits6
UbuntuCve
UbuntuCve
added 2024/03/12 9:15 p.m.22 views

CVE-2024-27305

aiosmtpd is a reimplementation of the Python stdlib smtpd.py based on asyncio. aiosmtpd is vulnerable to inbound SMTP smuggling. SMTP smuggling is a novel vulnerability based on not so novel interpretation differences of the SMTP protocol. By exploiting SMTP smuggling, an attacker may send...

5.3CVSS6.1AI score0.00374EPSS
SaveExploits0References5
OSV
OSV
added 2024/03/12 9:15 p.m.11 views

UBUNTU-CVE-2024-27305

aiosmtpd is a reimplementation of the Python stdlib smtpd.py based on asyncio. aiosmtpd is vulnerable to inbound SMTP smuggling. SMTP smuggling is a novel vulnerability based on not so novel interpretation differences of the SMTP protocol. By exploiting SMTP smuggling, an attacker may send...

5.3CVSS5.8AI score0.00374EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2024/03/12 8:29 p.m.21 views

CVE-2024-27305 SMTP smuggling in aiosmtpd

aiosmtpd is a reimplementation of the Python stdlib smtpd.py based on asyncio. aiosmtpd is vulnerable to inbound SMTP smuggling. SMTP smuggling is a novel vulnerability based on not so novel interpretation differences of the SMTP protocol. By exploiting SMTP smuggling, an attacker may send...

5.3CVSS5.3AI score0.00374EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/03/12 8:29 p.m.24 views

CVE-2024-27305 SMTP smuggling in aiosmtpd

aiosmtpd is a reimplementation of the Python stdlib smtpd.py based on asyncio. aiosmtpd is vulnerable to inbound SMTP smuggling. SMTP smuggling is a novel vulnerability based on not so novel interpretation differences of the SMTP protocol. By exploiting SMTP smuggling, an attacker may send...

5.3CVSS5.1AI score0.00374EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/03/12 12:0 a.m.6 views

aiosmtpd Data Forgery Issue Vulnerability

aiosmtpd is an asyncio-based SMTP server. aiosmtpd is vulnerable to a data forgery issue that stems from the presence of an SMTP smuggling vulnerability...

5.3CVSS6.8AI score0.00374EPSS
SaveExploits0References6
NVD
NVD
added 2024/03/11 10:15 p.m.21 views

CVE-2024-27938

Postal is an open source SMTP server. Postal versions less than 3.0.0 are vulnerable to SMTP Smuggling attacks which may allow incoming e-mails to be spoofed. This, in conjunction with a cooperative outgoing SMTP service, would allow for an incoming e-mail to be received by Postal addressed from ...

5.3CVSS5.2AI score0.00664EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/03/11 9:18 p.m.20 views

CVE-2024-27938 SMTP Smuggling in Postal

Postal is an open source SMTP server. Postal versions less than 3.0.0 are vulnerable to SMTP Smuggling attacks which may allow incoming e-mails to be spoofed. This, in conjunction with a cooperative outgoing SMTP service, would allow for an incoming e-mail to be received by Postal addressed from ...

5.3CVSS6.8AI score0.00664EPSS
SaveExploits1References4
CVE
CVE
added 2024/03/11 9:18 p.m.104 views

CVE-2024-27938

CVE-2024-27938 concerns Postal, an open source SMTP server. The vulnerability affects Postal versions older than 3.0.0 and enables SMTP Smuggling, potentially allowing an incoming email to be spoofed as if sent from a server the recipient user authorized. The impact is limited to inbound mail flo...

5.3CVSS5.2AI score0.00664EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2024/03/11 9:18 p.m.26 views

CVE-2024-27938 SMTP Smuggling in Postal

Postal is an open source SMTP server. Postal versions less than 3.0.0 are vulnerable to SMTP Smuggling attacks which may allow incoming e-mails to be spoofed. This, in conjunction with a cooperative outgoing SMTP service, would allow for an incoming e-mail to be received by Postal addressed from ...

5.3CVSS5.5AI score0.00664EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/03/11 12:0 a.m.12 views

Postal security breach

Postal is Postal open source a complete and fully functional mail server . It is intended for use by Web sites and Web servers. A security vulnerability exists in Postal versions prior to 3.0 that stems from vulnerability to SMTP smuggling attacks, allowing attackers to spoof incoming e-mail...

5.3CVSS6.7AI score0.00664EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/03/11 12:0 a.m.13 views

PT-2024-22152 · Postal · Postal

Name of the Vulnerable Software and Affected Versions: Postal versions less than 3.0.0 Description: The issue allows for SMTP Smuggling attacks, which may enable incoming e-mails to be spoofed. This could allow an incoming e-mail to be received by Postal, appearing to be from a server that a user...

5.3CVSS7.1AI score0.00664EPSS
SaveExploits1References8
NVD
NVD
added 2024/03/08 2:15 a.m.32 views

CVE-2024-23242

A privacy issue was addressed by not logging contents of text fields. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to view Mail data...

3.3CVSS6.6AI score0.00215EPSS
SaveExploits0References7
OSV
OSV
added 2024/03/08 2:15 a.m.11 views

CVE-2024-23242

A privacy issue was addressed by not logging contents of text fields. This issue is fixed in macOS Sonoma 14.4, iOS 17.4 and iPadOS 17.4. An app may be able to view Mail data...

3.3CVSS5.7AI score0.00215EPSS
SaveExploits0References5
Prion
Prion
added 2024/03/08 2:15 a.m.24 views

Code injection

A privacy issue was addressed by not logging contents of text fields. This issue is fixed in macOS Sonoma 14.4, iOS 17.4 and iPadOS 17.4. An app may be able to view Mail data...

6AI score0.00215EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/03/08 1:36 a.m.37 views

CVE-2024-23242

A privacy issue was addressed by not logging contents of text fields. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to view Mail data...

6.8AI score0.00215EPSS
SaveExploits0References2
Rows per page
Query Builder