Lucene search
+L

15584 matches found

CNVD
CNVD
added 2015/01/09 12:00 a.m.6 views

Wireshark SMTP parser 'packet-smtp.c' remote denial of service vulnerability

Wireshark is an open source network protocol analysis tool. A remote denial of service vulnerability exists in Wireshark SMTP Dissector 'packet-smtp.c', which can be exploited by an attacker to crash the affected application and deny service to legitimate users...

5CVSS6.9AI score0.02432EPSS
SaveExploits0References1
OSV
OSV
added 2015/01/07 7:26 p.m.20 views

USN-2455-1 bsd-mailx vulnerability

It was discovered that bsd-mailx contained a feature that allowed syntactically valid email addresses to be treated as shell commands. A remote attacker could possibly use this issue with a valid email address to execute arbitrary commands. This functionality has now been disabled by default, and...

7.8CVSS7.2AI score0.0155EPSS
SaveExploits0References2
Mageia
Mageia
added 2015/01/07 3:14 p.m.19 views

Updated webmin packages fix security vulnerabilities

Updated webmin package fixes security vulnerability: The webmin package has been updated to version 1.730 to fix possible security issues that could be caused by malicious symlinks when reading mail. The updated version also has various bug fixes, translation updates, and functionality...

3.5AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2015/01/06 12:00 a.m.45 views

Fedora 19 : claws-mail-3.11.1-2.fc19 / claws-mail-plugins-3.11.1-1.fc19 / libetpan-1.6-1.fc19 (2014-14237) (POODLE)

SSLv3 server connections are now disabled by default, in response to the POODLE vulnerability, see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014- 3566. - Several PGP/Core plugin improvements - A new version of the RSSyl plugin, completely redesigned and rewritten. - The results of TAB...

4.3CVSS6.8AI score0.99999EPSS
SaveExploits7References28
exploitpack
exploitpack
added 2015/01/05 7:07 p.m.28 views

MP3-CD-Converter-Professional-BoF-(SEH)

Exploit Titule: Exploit Buffer Overflow MP3 CD Converter ProfessionalSEH Date: 12/20/2010 Author: C4SS!0 G0M3S Software Link: http://www.mp3-cd-converter.com/mp3cdconverter.exe Version: 5.0.3 import os import sys import struct import time def usage: os.system"cls" os.system"color 4f" print"\n"...

0.2AI score
SaveExploits0
Fedora
Fedora
added 2015/01/05 7:36 a.m.46 views

[SECURITY] Fedora 19 Update: claws-mail-3.11.1-2.fc19

Claws Mail is an email client and news reader, based on GTK+, featuring quick response, graceful and sophisticated interface, easy configuration, intuitive operation, abundant features, and extensibility...

4.3CVSS2.1AI score0.99999EPSS
SaveExploits7
Fedora
Fedora
added 2015/01/05 7:36 a.m.58 views

[SECURITY] Fedora 19 Update: libetpan-1.6-1.fc19

The purpose of this mail library is to provide a portable, efficient middle -ware for different kinds of mail access. When using the drivers interface, the interface is the same for all kinds of mail access, remote and local mailbo xes...

4.3CVSS5.3AI score0.99999EPSS
SaveExploits7
Fedora
Fedora
added 2015/01/05 7:36 a.m.72 views

[SECURITY] Fedora 19 Update: claws-mail-plugins-3.11.1-1.fc19

Additional plugins for Claws Mail...

4.3CVSS1.9AI score0.99999EPSS
SaveExploits7
OpenVAS
OpenVAS
added 2015/01/05 12:00 a.m.35 views

Fedora Update for claws-mail-plugins FEDORA-2014-14237

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS5.4AI score0.99999EPSS
SaveExploits7References2
OpenVAS
OpenVAS
added 2015/01/05 12:00 a.m.24 views

Fedora Update for claws-mail FEDORA-2014-14237

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS5.4AI score0.99999EPSS
SaveExploits7References2
seebug.org
seebug.org
added 2015/01/04 12:00 a.m.69 views

U-Mail v9.8.57 /getpass.php 信息泄漏漏洞

No description provided by source...

7.1AI score
SaveExploits0
Fedora
Fedora
added 2015/01/03 7:11 p.m.38 views

[SECURITY] Fedora 20 Update: mailx-12.5-11.fc20

Mailx is an enhanced mail command, which provides the functionality of the POSIX mailx command, as well as SysV mail and Berkeley Mail from which it is derived. Additionally to the POSIX features, mailx can work with Maildir/ e-mail storage format as well as mailboxes, supports IMAP, POP3 and SMT...

7.8CVSS0.4AI score0.06858EPSS
SaveExploits1
Fedora
Fedora
added 2015/01/03 7:09 p.m.43 views

[SECURITY] Fedora 21 Update: mailx-12.5-14.fc21

Mailx is an enhanced mail command, which provides the functionality of the POSIX mailx command, as well as SysV mail and Berkeley Mail from which it is derived. Additionally to the POSIX features, mailx can work with Maildir/ e-mail storage format as well as mailboxes, supports IMAP, POP3 and SMT...

7.8CVSS0.4AI score0.06858EPSS
SaveExploits1
Fedora
Fedora
added 2015/01/03 7:03 p.m.41 views

[SECURITY] Fedora 19 Update: mailx-12.5-9.fc19

Mailx is an enhanced mail command, which provides the functionality of the POSIX mailx command, as well as SysV mail and Berkeley Mail from which it is derived. Additionally to the POSIX features, mailx can work with Maildir/ e-mail storage format as well as mailboxes, supports IMAP, POP3 and SMT...

7.8CVSS0.4AI score0.06858EPSS
SaveExploits1
UbuntuCve
UbuntuCve
added 2014/12/29 8:59 p.m.43 views

CVE-2014-3556

The STARTTLS implementation in mail/ngxmailsmtphandler.c in the SMTP proxy in nginx 1.5.x and 1.6.x before 1.6.1 and 1.7.x before 1.7.4 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command...

6.8CVSS5.9AI score0.07832EPSS
SaveExploits0References2
OSV
OSV
added 2014/12/29 8:59 p.m.23 views

UBUNTU-CVE-2014-3556

The STARTTLS implementation in mail/ngxmailsmtphandler.c in the SMTP proxy in nginx 1.5.x and 1.6.x before 1.6.1 and 1.7.x before 1.7.4 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command...

6.8CVSS5.8AI score0.07832EPSS
SaveExploits0References3
CVE
CVE
added 2014/12/29 8:00 p.m.140 views

CVE-2014-3556

The CVE-2014-3556 entry affects nginx 1.5.x and 1.6.x before 1.6.1 and 1.7.x before 1.7.4. The STARTTLS implementation in mail/ngx_mail_smtp_handler.c allows an MITM to inject commands into encrypted SMTP sessions by sending a cleartext command after TLS is established, due to insufficient I/O bu...

6.8CVSS6.8AI score0.07832EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2014/12/29 8:00 p.m.46 views

CVE-2014-3556

The STARTTLS implementation in mail/ngxmailsmtphandler.c in the SMTP proxy in nginx 1.5.x and 1.6.x before 1.6.1 and 1.7.x before 1.7.4 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command...

8.9AI score0.07832EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2014/12/29 12:00 a.m.23 views

GLSA-201412-50 : getmail: Information disclosure

The remote host is affected by the vulnerability described in GLSA-201412-50 getmail: Information disclosure Multiple vulnerabilities have been discovered in getmail. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could cause a man-in-the-middle attack...

6.8CVSS5.5AI score0.00928EPSS
SaveExploits0References4
Gentoo Linux
Gentoo Linux
added 2014/12/28 12:00 a.m.31 views

getmail: Information disclosure

Background getmail is a POP3 mail retriever with reliable Maildir and mbox delivery. Description Multiple vulnerabilities have been discovered in getmail. Please review the CVE identifiers referenced below for details. Impact A remote attacker could cause a man-in-the-middle attack via multiple...

6.8CVSS6.5AI score0.00928EPSS
SaveExploits0
Rows per page
Query Builder