Lucene search
+L

823 matches found

OSV
OSV
added 2026/03/23 4:45 a.m.7 views

MINI-576V-R3JH-26W2

Bulletin has no description...

7CVSS7AI score0.00157EPSS
Exploits0
Circl
Circl
added 2026/03/14 2:10 a.m.22 views

GHSA-4J3X-HHG2-FM2X

creationtimestamp| type| source ---|---|--- 2026-03-14 02:10:06+00:00| seen| https://gist.github.com/alon710/766027522f4a24eebe6b64034afd846c...

5.7AI score
Exploits0References1
OSV
OSV
added 2026/03/13 10:46 a.m.4 views

MINI-4V2X-27P3-PPW3

Bulletin has no description...

7.5CVSS5.7AI score0.00728EPSS
Exploits0
OSV
OSV
added 2026/03/10 3:30 p.m.1 views

MINI-HJ75-PF2H-482P

Bulletin has no description...

7.5CVSS5.7AI score0.00728EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2026/03/08 1:44 a.m.7 views

CVE-2026-30227

MimeKit is a C library which may be used for the creation and parsing of messages using the Multipurpose Internet Mail Extension MIME, as defined by numerous IETF specifications. Prior to version 4.15.1, a CRLF injection vulnerability in MimeKit allows an attacker to embed \r\n into the SMTP...

6.9CVSS5.7AI score0.01085EPSS
Exploits1References1
EUVD
EUVD
added 2026/03/07 12:30 a.m.6 views

EUVD-2026-10085

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered...

5.8AI score0.00606EPSS
Exploits0References5
OSV
OSV
added 2026/03/06 10:16 p.m.9 views

AZL-79613 CVE-2026-27137 affecting package golang 1.25.7-1

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered...

7.5CVSS7.3AI score0.00606EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/06 9:28 p.m.11 views

CVE-2026-27137

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered...

5.8AI score0.00606EPSS
Exploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/06 9:28 p.m.4 views

CVE-2026-27137 Incorrect enforcement of email constraints in crypto/x509

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered...

5.8AI score0.00606EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/03/06 9:28 p.m.40 views

CVE-2026-27137 Incorrect enforcement of email constraints in crypto/x509

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered...

0.00606EPSS
Exploits0References4
NVD
NVD
added 2026/03/06 9:16 p.m.9 views

CVE-2026-30227

MimeKit is a C library which may be used for the creation and parsing of messages using the Multipurpose Internet Mail Extension MIME, as defined by numerous IETF specifications. Prior to version 4.15.1, a CRLF injection vulnerability in MimeKit allows an attacker to embed \r\n into the SMTP...

6.9CVSS0.01085EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/03/06 9:7 p.m.5 views

CVE-2026-30227

MimeKit is a C library which may be used for the creation and parsing of messages using the Multipurpose Internet Mail Extension MIME, as defined by numerous IETF specifications. Prior to version 4.15.1, a CRLF injection vulnerability in MimeKit allows an attacker to embed \r\n into the SMTP...

6.9CVSS5.7AI score0.01085EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2026/03/06 9:7 p.m.11 views

CVE-2026-30227 MimeKit: CRLF Injection in Quoted Local-Part Enables SMTP Command Injection and Email Forgery

MimeKit is a C library which may be used for the creation and parsing of messages using the Multipurpose Internet Mail Extension MIME, as defined by numerous IETF specifications. Prior to version 4.15.1, a CRLF injection vulnerability in MimeKit allows an attacker to embed \r\n into the SMTP...

6.9CVSS5.7AI score0.01085EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/03/06 9:7 p.m.5 views

CVE-2026-30227 MimeKit: CRLF Injection in Quoted Local-Part Enables SMTP Command Injection and Email Forgery

MimeKit is a C library which may be used for the creation and parsing of messages using the Multipurpose Internet Mail Extension MIME, as defined by numerous IETF specifications. Prior to version 4.15.1, a CRLF injection vulnerability in MimeKit allows an attacker to embed \r\n into the SMTP...

6.9CVSS5.7AI score0.01085EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/03/06 9:7 p.m.30 views

CVE-2026-30227 MimeKit: CRLF Injection in Quoted Local-Part Enables SMTP Command Injection and Email Forgery

MimeKit is a C library which may be used for the creation and parsing of messages using the Multipurpose Internet Mail Extension MIME, as defined by numerous IETF specifications. Prior to version 4.15.1, a CRLF injection vulnerability in MimeKit allows an attacker to embed \r\n into the SMTP...

6.9CVSS0.01085EPSS
Exploits1References1
CVE
CVE
added 2026/03/06 9:7 p.m.24 views

CVE-2026-30227

MimeKit prior to 4.15.1 contains a CRLF injection vulnerability in the SMTP envelope local-part when it is a quoted-string, allowing injection of \r\n into mailbox addresses via MailboxAddress . This can lead to SMTP command injection (e.g., extra RCPT TO/DATA/RSET) and potentially header injecti...

6.9CVSS5.7AI score0.01085EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2026/03/06 12:0 a.m.11 views

MimeKit 注入漏洞

MimeKit is a C library developed by Jeffrey Stedfast for creating and parsing MIME messages. Versions of MimeKit prior to 4.15.1 had a injection vulnerability, which stemmed from CRLF injections in the local part of SMTP envelope addresses. This vulnerability could lead to SMTP command injections...

6.9CVSS5.8AI score0.01085EPSS
Exploits1References2
Packet Storm
Packet Storm
added 2026/03/06 12:0 a.m.293 views

📄 OpenEXR Integer Overflow

Proof of concept exploit for a potential integer overflow condition when processing specially crafted multi‑part DeepScanLine EXR files with OpenEXR. The program generates a malicious .exr file containing 86 parts, where each pixel is assigned 50,000,000 samples. When these values are summed...

8.4CVSS5.9AI score0.00201EPSS
Exploits2
Github Security Blog
Github Security Blog
added 2026/03/05 9:50 p.m.39 views

MimeKit has CRLF Injection in Quoted Local-Part that Enables SMTP Command Injection and Email Forgery

Summary A CRLF Injection vulnerability in MimeKit 4.15.0 allows an attacker to embed \r\n into the SMTP envelope address local-part when the local-part is a quoted-string. This is non-compliant with RFC 5321 and can result in SMTP command injection e.g., injecting additional RCPT TO / DATA / RSET...

6.9CVSS6AI score0.01085EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2026/03/05 9:50 p.m.30 views

GHSA-G7HC-96XR-GVVX MimeKit has CRLF Injection in Quoted Local-Part that Enables SMTP Command Injection and Email Forgery

Summary A CRLF Injection vulnerability in MimeKit 4.15.0 allows an attacker to embed \r\n into the SMTP envelope address local-part when the local-part is a quoted-string. This is non-compliant with RFC 5321 and can result in SMTP command injection e.g., injecting additional RCPT TO / DATA / RSET...

6.9CVSS6AI score0.01085EPSS
Exploits1References3
Rows per page
Query Builder