Lucene search
+L

18587 matches found

osv_cve
osv_cve
•added 2021/08/16 8:15 p.m.•22 views

CVE-2021-37708

Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a command injection vulnerability in mail agent settings. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin...

9.8CVSS7.4AI score
SaveExploits0References2
NVD
NVD
•added 2021/08/16 8:15 p.m.•36 views

CVE-2021-37708

Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a command injection vulnerability in mail agent settings. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin...

9.8CVSS0.02359EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/08/16 8:15 p.m.•14 views

CVE-2021-37708

Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a command injection vulnerability in mail agent settings. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin...

9.8CVSS5.5AI score0.02359EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2021/08/16 8:15 p.m.•25 views

Command injection

Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a command injection vulnerability in mail agent settings. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin...

7.5CVSS9.6AI score0.02359EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2021/08/16 7:15 p.m.•9 views

CVE-2021-37708

Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a command injection vulnerability in mail agent settings. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin...

9.8CVSS0.02359EPSS
SaveExploits0References4
CVE
CVE
•added 2021/08/16 7:15 p.m.•129 views

CVE-2021-37708

Shopware is affected by a command injection vulnerability in the mail agent settings for versions prior to 6.4.3.1. The issue is fixed in 6.4.3.1, with workaround security measures available via a plugin for older series (6.1–6.3). Practical impact is a command injection in mail proxy/settings, a...

9.8CVSS9.4AI score0.02359EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/08/16 7:15 p.m.•42 views

CVE-2021-37708 Command injection in mail agent settings

Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a command injection vulnerability in mail agent settings. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin...

8.8CVSS9.9AI score0.02359EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2021/08/16 10:06 a.m.•91 views

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

8.8CVSS7.2AI score0.01451EPSS
SaveExploits5References7
RedHat Linux
RedHat Linux
•added 2021/08/16 9:32 a.m.•99 views

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

8.8CVSS7.2AI score0.01451EPSS
SaveExploits5References7
CNNVD
CNNVD
•added 2021/08/16 12:00 a.m.•24 views

Shopware operating system command injection vulnerability

Shopware is a suite of open source e-commerce software from the German company Shopware. versions of Shopware prior to 6.4.3.1 have a command injection vulnerability in the mail proxy settings. No detailed vulnerability details are currently available...

9.8CVSS5.7AI score0.02359EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/16 12:00 a.m.•9 views

CVE-2021-37708: Improper Neutralization of Special Elements used in a Command

Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a command injection vulnerability in mail agent settings. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin...

9.8CVSS5.8AI score0.02359EPSS
SaveExploits0References3
Mageia
Mageia
•added 2021/08/15 8:38 a.m.•80 views

Updated sylpheed and claws-mail packages fix security vulnerability

Updated sylpheed and claws-mail packages fix security vulnerability: The textviewurisecuritycheck function in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click CVE-2021-37746...

6.1CVSS1.8AI score0.01164EPSS
SaveExploits0References2
osv_mgasa
osv_mgasa
•added 2021/08/15 8:38 a.m.•21 views

MGASA-2021-0408 Updated sylpheed and claws-mail packages fix security vulnerability

Updated sylpheed and claws-mail packages fix security vulnerability: The textviewurisecuritycheck function in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click CVE-2021-37746...

6.1CVSS6.3AI score0.01164EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2021/08/15 2:15 a.m.•22 views

Exploit for CVE-2021-38817

CVE-2021-38817-Remote-OS-Command-Injection Authenticated Remot...

8.4AI score
SaveExploits1
OpenVAS
OpenVAS
•added 2021/08/13 12:00 a.m.•65 views

Fedora: Security Advisory for fetchmail (FEDORA-2021-b904d99ce5)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.0256EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/08/13 12:00 a.m.•37 views

Fedora: Security Advisory for fetchmail (FEDORA-2021-47893f53ed)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.0256EPSS
SaveExploits0References2
Fedora
Fedora
•added 2021/08/12 1:26 a.m.•41 views

[SECURITY] Fedora 33 Update: fetchmail-6.4.20-1.fc33

Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC for retrieval...

7.5CVSS0.8AI score0.0256EPSS
SaveExploits0
Fedora
Fedora
•added 2021/08/12 1:06 a.m.•62 views

[SECURITY] Fedora 34 Update: fetchmail-6.4.20-1.fc34

Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC for retrieval...

7.5CVSS0.8AI score0.0256EPSS
SaveExploits0
osv_debian
osv_debian
•added 2021/08/10 3:15 p.m.•4 views

DEBIAN-CVE-2021-38371

The STARTTLS feature in Exim through 4.94.2 allows response injection buffering during MTA SMTP sending...

7.5CVSS7.6AI score0.01996EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2021/08/10 3:15 p.m.•22 views

DEBIAN-CVE-2021-38373

In KDE KMail 19.12.3 aka 5.13.3, the SMTP STARTTLS option is not honored and cleartext messages are sent unless "Server requires authentication" is checked...

5.3CVSS5.6AI score0.00527EPSS
SaveExploits0References1
Rows per page
Query Builder