Lucene search
K

54 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 12:28 p.m.8 views

CVE-2023-40599

Regular expression Denial-of-Service ReDoS exists in multiple add-ons for Mailform Pro CGI 4.3.1.3 and earlier, which allows a remote unauthenticated attacker to cause a denial-of-service condition. Affected add-ons are as follows: call/call.js, prefcodeadv/search.cgi, estimate/estimate.js,...

7.5CVSS7AI score0.00672EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:57 a.m.4 views

CVE-2022-38400

Mailform Pro CGI 4.3.1 and earlier allow a remote unauthenticated attacker to obtain the user input data by having a use of the product to access a specially crafted URL...

5.9CVSS7AI score0.01199EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2015-0893

Malware in sbrugna...

6.8CVSS6.4AI score0.02293EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.36 views

EUVD-2025-27990

Malicious code in bioql PyPI...

6.3CVSS5AI score0.00338EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-40985

Malicious code in bioql PyPI...

5.9CVSS4.9AI score0.01199EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2023-45157

Malicious code in bioql PyPI...

7.5CVSS5.5AI score0.00672EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-36853

Malicious code in bioql PyPI...

7.5CVSS4.8AI score0.01253EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/28 7:17 a.m.13 views

CVE-2025-41441

Mailform Pro CGI prior to 4.3.4 generates error messages containing sensitive information, which may allow a remote unauthenticated attacker to obtain coupon codes. This vulnerability only affects products that use the coupon feature...

6.3CVSS6.8AI score0.00338EPSS
Exploits0References1
NVD
NVD
added 2025/05/26 7:15 a.m.48 views

CVE-2025-41441

Mailform Pro CGI prior to 4.3.4 generates error messages containing sensitive information, which may allow a remote unauthenticated attacker to obtain coupon codes. This vulnerability only affects products that use the coupon feature...

6.3CVSS0.00338EPSS
Exploits0References2
OSV
OSV
added 2025/05/26 7:15 a.m.2 views

CVE-2025-41441

Mailform Pro CGI prior to 4.3.4 generates error messages containing sensitive information, which may allow a remote unauthenticated attacker to obtain coupon codes. This vulnerability only affects products that use the coupon feature...

5.3CVSS5.8AI score0.00338EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/05/26 6:27 a.m.6 views

CVE-2025-41441

Mailform Pro CGI prior to 4.3.4 generates error messages containing sensitive information, which may allow a remote unauthenticated attacker to obtain coupon codes. This vulnerability only affects products that use the coupon feature...

6.3CVSS6.8AI score0.00338EPSS
Exploits0References2
CVE
CVE
added 2025/05/26 6:27 a.m.48 views

CVE-2025-41441

CVE-2025-41441 affects Mailform Pro CGI versions prior to 4.3.4. The vulnerability stems from error messages that disclose sensitive information (CWE-209), which may allow a remote unauthenticated attacker to obtain coupon codes in systems that enable the coupon feature. Impact is limited to prod...

6.3CVSS4.2AI score0.00338EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2025/05/26 6:27 a.m.59 views

CVE-2025-41441

Mailform Pro CGI prior to 4.3.4 generates error messages containing sensitive information, which may allow a remote unauthenticated attacker to obtain coupon codes. This vulnerability only affects products that use the coupon feature...

6.3CVSS0.00338EPSS
Exploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/05/26 5:22 a.m.3 views

Mailform Pro CGI generating error messages containing sensitive information

Overview Mailform Pro CGI provided by SYNCK GRAPHICA contains a vulnerability listed below. Generation of error message containing sensitive information CWE-209 - CVE-2025-41441 Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the...

9.8CVSS6.6AI score0.00935EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/05/26 12:0 a.m.1 views

SYNCK GRAPHICA Mailform Pro CGI 安全漏洞

SYNCK GRAPHICA Mailform Pro CGI is a mail form from SYNCK GRAPHICA Japan. It can be used as a multiple transmission, questionnaire form, and application form. A security vulnerability exists in SYNCK GRAPHICA Mailform Pro CGI versions prior to 4.3.4, which originates from an error message...

6.3CVSS4.7AI score0.00338EPSS
Exploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/05/26 12:0 a.m.35 views

JVN#39546799: Mailform Pro CGI generating error messages containing sensitive information

Mailform Pro CGI provided by SYNCK GRAPHICA contains a vulnerability listed below. Generation of error message containing sensitive information CWE-209 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N Base Score 6.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Base Score 3.7...

6.3CVSS6.8AI score0.00338EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/05/26 12:0 a.m.6 views

PT-2025-22903 · Unknown · Mailform Pro Cgi

Name of the Vulnerable Software and Affected Versions: Mailform Pro CGI versions prior to 4.3.4 Description: The issue allows a remote unauthenticated attacker to obtain coupon codes due to error messages containing sensitive information. This only affects products that use the coupon feature...

6.3CVSS4.2AI score0.00338EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/05/23 3:49 a.m.7 views

CVE-2023-32610

Mailform Pro CGI 4.3.1.2 and earlier allows a remote unauthenticated attacker to cause a denial-of-service DoS condition...

7.5CVSS7AI score0.01253EPSS
Exploits0References1
NVD
NVD
added 2023/08/25 3:15 a.m.35 views

CVE-2023-40599

Regular expression Denial-of-Service ReDoS exists in multiple add-ons for Mailform Pro CGI 4.3.1.3 and earlier, which allows a remote unauthenticated attacker to cause a denial-of-service condition. Affected add-ons are as follows: call/call.js, prefcodeadv/search.cgi, estimate/estimate.js,...

7.5CVSS7.5AI score0.00672EPSS
Exploits0References2
OSV
OSV
added 2023/08/25 3:15 a.m.4 views

CVE-2023-40599

Regular expression Denial-of-Service ReDoS exists in multiple add-ons for Mailform Pro CGI 4.3.1.3 and earlier, which allows a remote unauthenticated attacker to cause a denial-of-service condition. Affected add-ons are as follows: call/call.js, prefcodeadv/search.cgi, estimate/estimate.js,...

7.5CVSS6.4AI score0.00672EPSS
Exploits0References2
Rows per page
Query Builder