Lucene search
+L

69 matches found

OSV
OSV
added 2021/12/07 12:15 a.m.2 views

DEBIAN-CVE-2021-44686

calibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service in htmlpreprocessrules in ebooks/conversion/preprocess.py...

7.5CVSS7.3AI score0.04986EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/12/07 12:0 a.m.12 views

Calibre 资源管理错误漏洞

Calibre is an open source free all-in-one eBook reading management and format conversion tool. A security vulnerability exists in calibre before 5.32.0, which stems from the inclusion of regular expressions vulnerable to ReDoS Regular Expression Denial of Service attacks in htmlpreprocessrules in...

7.5CVSS5.6AI score0.04986EPSS
SaveExploits1References6
Debian CVE
Debian CVE
added 2021/12/06 11:41 p.m.55 views

CVE-2021-44686

calibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service in htmlpreprocessrules in ebooks/conversion/preprocess.py...

7.5CVSS7.4AI score0.04986EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2021/12/06 12:0 a.m.11 views

PT-2021-24154 · Calibre · Calibre

Name of the Vulnerable Software and Affected Versions: calibre versions prior to 5.32.0 Description: The issue is related to a regular expression in html preprocess rules within the ebooks/conversion/preprocess.py file that is vulnerable to ReDoS Regular Expression Denial of Service. This could...

7.5CVSS6.7AI score0.04986EPSS
SaveExploits2References23
ATTACKERKB
ATTACKERKB
added 2021/02/14 4:15 a.m.5 views

CVE-2021-26929

An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 where the HordeTextFilter library before 2.3.7 is used. The attacker can send a plain text e-mail message, with JavaScript encoded as a link or email that is mishandled by preProcess in Text2html.php, because bespoke us...

6.1CVSS6AI score0.04944EPSS
SaveExploits7References8
Debian CVE
Debian CVE
added 2021/02/14 3:43 a.m.110 views

CVE-2021-26929

An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 where the HordeTextFilter library before 2.3.7 is used. The attacker can send a plain text e-mail message, with JavaScript encoded as a link or email that is mishandled by preProcess in Text2html.php, because bespoke us...

6.1CVSS6.2AI score0.04944EPSS
SaveExploits7
Fedora
Fedora
added 2014/09/25 10:42 a.m.29 views

[SECURITY] Fedora 19 Update: procmail-3.22-36.fc19

Procmail can be used to create mail-servers, mailing lists, sort your incoming mail into separate folders/files real convenient when subscribing to one or more mailing lists or for prioritising your mail, preprocess your mail, start any programs upon mail arrival e.g. to generate different chimes...

7.5CVSS1.6AI score0.08525EPSS
SaveExploits1
Fedora
Fedora
added 2014/09/13 6:51 a.m.28 views

[SECURITY] Fedora 20 Update: procmail-3.22-36.fc20

Procmail can be used to create mail-servers, mailing lists, sort your incoming mail into separate folders/files real convenient when subscribing to one or more mailing lists or for prioritising your mail, preprocess your mail, start any programs upon mail arrival e.g. to generate different chimes...

7.5CVSS1.6AI score0.08525EPSS
SaveExploits1
Drupal
Drupal
added 2014/04/30 12:0 a.m.26 views

SA-CONTRIB-2014-047 - Zen - Cross Site Scripting

The Zen theme is a powerful, yet simple, HTML5 starting theme with a responsive, mobile-first grid design. The theme does not properly sanitize theme settings before they are used in the output of a page. Themes that have copied code from Zen's template.php may suffer from this same issue. If you...

3.5CVSS5.8AI score0.00946EPSS
SaveExploits0References10
Rows per page
Query Builder