Lucene search
K

10 matches found

OSV
OSV
added 2025/09/26 1:9 p.m.1 views

OESA-2025-2346 apache-mime4j security update

Java stream based MIME message parser. Security Fixes: A vulnerability was found in Apache James MIME4J up to 0.8.8. It has been rated as problematic.Using CWE to declare the problem leads to CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have...

5.5CVSS6.5AI score0.00009EPSS
Exploits0References2
OSV
OSV
added 2025/09/26 1:9 p.m.1 views

OESA-2025-2344 apache-mime4j security update

Java stream based MIME message parser. Security Fixes: A vulnerability was found in Apache James MIME4J up to 0.8.8. It has been rated as problematic.Using CWE to declare the problem leads to CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have...

5.5CVSS6.5AI score0.00009EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-22902

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The actionpack ruby gem a framework for handling and responding to web requests in Rails before 6.0.3.7, 6.1.3.2 suffers from a possible denial of service...

7.5CVSS6.7AI score0.00677EPSS
Exploits1References2
Veracode
Veracode
added 2023/03/09 1:51 a.m.26 views

Denial Of Service (DoS)

rack is vulnerable to Denial Of Service DoS. The vulnerability exists in the library's multipart MIME parser because it does not properly limit the total number of parts that can be uploaded, which allows an attacker to send maliciously crafted requests and crash the application...

7.5CVSS7.4AI score0.01982EPSS
Exploits0References9Affected Software3
SUSE CVE
SUSE CVE
added 2023/02/15 3:45 a.m.1 views

SUSE CVE-2021-22902

The actionpack ruby gem a framework for handling and responding to web requests in Rails before 6.0.3.7, 6.1.3.2 suffers from a possible denial of service vulnerability in the Mime type parser of Action Dispatch. Carefully crafted Accept headers can cause the mime type parser in Action Dispatch t...

6.5CVSS6.3AI score0.00677EPSS
Exploits1References3
Veracode
Veracode
added 2022/05/30 2:27 a.m.28 views

Regular Expression Denial Of Service (ReDoS)

rack is vulnerable to regular expression denial of service. The vulnerability exists because the BROKENQUOTED and BROKENUNQUOTED attributes in the Multipart module of multipart.rb does not properly restrict the broken mime parser, allowing an attacker to crash the application by providing malicio...

7.5CVSS8.3AI score0.01042EPSS
Exploits0References9Affected Software5
CNVD
CNVD
added 2020/09/27 12:0 a.m.1 views

Wireshark MIME Parser Denial of Service Vulnerability

Wireshark is a suite of network packet analysis software from the Wireshark team. A security vulnerability in the processing of messages by the Wireshark MIME parser can be exploited by a remote attacker to submit a special request that can crash an application...

7.5CVSS7.8AI score0.00181EPSS
Exploits1References1
Veracode
Veracode
added 2020/03/05 7:30 a.m.6 views

Denial Of Service (DoS) Through Memory Exhaustion

emailjs-mime-parser is vulnerable to denial of serviceDOS attacks. Lack of necessary validations in mimeparser.js allows an attacker to send an unlimited number of MimeNode objects causing the system to take a disproportionate amount of time to process, resulting in an application crash...

3.9AI score
Exploits0
OpenVAS
OpenVAS
added 2012/08/03 12:0 a.m.17 views

Mandriva Update for openssl MDVSA-2012:060 (openssl)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.5CVSS7.6AI score0.08744EPSS
Exploits8References2
securityvulns
securityvulns
added 2006/07/03 12:0 a.m.41 views

Current Versions Release History

Current Versions Release History 5.1c2 30-Jun-06 Valid Core License Keys: issued between 01-Jun-2004 and 31-Oct-2004, or on or after 01-Jun-2005. Admin: Lawful Intercept for Signals is implemented. WSSP: now all string prefixes HTML, JAVASCRIPT, etc. support numeric data. XIMSS: the Signal...

7.9AI score
Exploits0
Rows per page
Query Builder