Lucene search
+L

719 matches found

Debian CVE
Debian CVE
added 2024/10/16 8:55 p.m.35 views

CVE-2024-47889

Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. Carefully crafted text can cause the blockformat helper to...

8.7CVSS5.3AI score0.00937EPSS
SaveExploits0
OSV
OSV
added 2024/10/16 8:55 p.m.25 views

CVE-2024-47889 Action Mailer has possible ReDoS vulnerability in block_format

Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. Carefully crafted text can cause the blockformat helper to...

8.7CVSS5.2AI score
SaveExploits0References7
OSV
OSV
added 2024/10/15 11:35 p.m.27 views

GHSA-H47H-MWP9-C6Q6 Possible ReDoS vulnerability in block_format in Action Mailer

There is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. This vulnerability has been assigned the CVE identifier CVE-2024-47889. Impact ------ Carefully crafted text can cause the blockformat helper to take an unexpected amount of time, possibly resulting in a DoS...

8.7CVSS5.3AI score0.00937EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2024/10/15 11:35 p.m.28 views

Possible ReDoS vulnerability in block_format in Action Mailer

There is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. This vulnerability has been assigned the CVE identifier CVE-2024-47889. Impact ------ Carefully crafted text can cause the blockformat helper to take an unexpected amount of time, possibly resulting in a DoS...

8.7CVSS9.3AI score0.00937EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/10/15 12:00 a.m.12 views

PT-2024-7931

Name of the Vulnerable Software and Affected Versions Action Mailer versions 3.0.0 through 6.1.7.8 Action Mailer versions 7.0.0 through 7.0.8.4 Action Mailer versions 7.1.0 through 7.1.4.0 Action Mailer versions 7.2.0 through 7.2.1.0 Description The issue is related to the block format helper in...

9.8CVSS6.2AI score0.0246EPSS
SaveExploits5References86
GitLab Advisory Database
GitLab Advisory Database
added 2024/10/15 12:00 a.m.35 views

Possible ReDoS vulnerability in block_format in Action Mailer

There is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. This vulnerability has been assigned the CVE identifier CVE-2024-47889. Impact ------ Carefully crafted text can cause the blockformat helper to take an unexpected amount of time, possibly resulting in a DoS...

8.7CVSS9.3AI score0.00937EPSS
SaveExploits0References5Affected Software1
RubySec
RubySec
added 2024/10/15 12:00 a.m.27 views

Possible ReDoS vulnerability in block_format in Action Mailer

There is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. This vulnerability has been assigned the CVE identifier CVE-2024-47889. Impact Carefully crafted text can cause the blockformat helper to take an unexpected amount of time, possibly resulting in a DoS vulnerabilit...

8.7CVSS6.9AI score0.00937EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2024/08/14 12:00 a.m.49 views

WordPress Post SMTP Mailer/Email Log Plugin < 2.8.8 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpexperts:postsmtp"; ifdescription...

7.2CVSS6.1AI score0.00941EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2024/08/14 12:00 a.m.52 views

WordPress Post SMTP Mailer/Email Log Plugin < 2.8.7 Multiple Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpexperts:postsmtp"; ifdescription...

9.8CVSS6.7AI score0.90339EPSS
SaveExploits10References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:45 p.m.6 views

Malicious code in action-mailer_cache_delivery (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/11 4:05 p.m.38 views

CVE-2023-52233 WordPress POST SMTP Mailer plugin <= 2.8.6 - Broken Access Control on API vulnerability

Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log.This issue affects Post SMTP Mailer/Email Log: from n/a through 2.8.6...

8.6CVSS0.00367EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/11 4:05 p.m.103 views

CVE-2023-52233

The CVE-2023-52233 entry concerns the WordPress plugin Post SMTP Mailer/Email Log (versions n/a–2.8.6). The authenticated note in Patchstack indicates a Missing Authorization/ Broken Access Control on the API, exploitable by an unauthenticated actor. Affects the plugin’s API surface, allowing una...

9.8CVSS9.1AI score0.00367EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/11 4:05 p.m.21 views

CVE-2023-52233 WordPress POST SMTP Mailer plugin <= 2.8.6 - Broken Access Control on API vulnerability

Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log.This issue affects Post SMTP Mailer/Email Log: from n/a through 2.8.6...

8.6CVSS7AI score0.00367EPSS
SaveExploits0References1
OSV
OSV
added 2024/06/11 4:05 p.m.15 views

CVE-2023-52233 WordPress POST SMTP Mailer plugin <= 2.8.6 - Broken Access Control on API vulnerability

Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log.This issue affects Post SMTP Mailer/Email Log: from n/a through 2.8.6...

8.6CVSS5.9AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/06/11 12:00 a.m.12 views

PT-2024-14497 · Unknown · Post Smtp Mailer/Email Log

Name of the Vulnerable Software and Affected Versions: Post SMTP Mailer/Email Log versions n/a through 2.8.6 Description: The issue is related to a Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log. Recommendations: For Post SMTP Mailer/Email Log versions n/a through...

9.8CVSS6.7AI score0.00367EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/06/11 12:00 a.m.13 views

WordPress plugin Post SMTP Mailer/Email Log security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPre...

9.8CVSS6.7AI score0.00367EPSS
SaveExploits0References3
OSV
OSV
added 2024/06/05 8:47 p.m.12 views

GHSA-XJW3-5R5C-M5PH typo3 Security fix for Flow Swift Mailer package

A remote code execution vulnerability has been found in the Swift Mailer library swiftmailer/swiftmailer recently. See this advisory for details. If you are not using the default mail transport, this particular problem does not affect you. Upgrading is of course still recommended!...

8.1AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2024/06/05 8:47 p.m.15 views

typo3 Security fix for Flow Swift Mailer package

A remote code execution vulnerability has been found in the Swift Mailer library swiftmailer/swiftmailer recently. See this advisory for details. If you are not using the default mail transport, this particular problem does not affect you. Upgrading is of course still recommended!...

8.1AI score
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2024/05/30 9:29 a.m.12 views

WordPress POST SMTP Mailer plugin <= 2.9.3 - Authenticated SQL Injection vulnerability

Authenticated SQL Injection vulnerability discovered by Le Ngoc Anh in WordPress Plugin Post SMTP versions = 2.9.3...

7.2CVSS8.1AI score0.00495EPSS
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
added 2024/05/17 11:06 p.m.31 views

Flow Swift Mailer package Remote code execution

A remote code execution vulnerability has been found in the Swift Mailer library swiftmailer/swiftmailer recently. See this advisory for details. If you are not using the default mail transport, this particular problem does not affect you. Upgrading is of course still recommended!...

9.8CVSS9.6AI score0.41827EPSS
SaveExploits18References3Affected Software1
Rows per page
Query Builder