Lucene search
K

2242 matches found

OSV
OSV
added 2019/12/17 2:15 p.m.1 views

UBUNTU-CVE-2014-8178

Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for attackers to poison the image cache via a crafted image in pull or push commands...

5.5CVSS6.7AI score0.00493EPSS
Exploits0References2
Prion
Prion
added 2019/12/17 2:15 p.m.16 views

Command injection

Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for attackers to poison the image cache via a crafted image in pull or push commands...

1.9CVSS6.7AI score0.00493EPSS
Exploits0References5Affected Software3
CNVD
CNVD
added 2019/12/16 12:0 a.m.1 views

Dovecot Null Pointer Dereference Vulnerability

Dovecot is an open source IMAP and POP3 mail server for Linux/Unix. A null pointer dereference vulnerability exists in Dovecot versions prior to 2.3.9.2, which can be exploited by an attacker via a specially crafted email to cause the push notification driver to crash if the push notification...

5.3CVSS8.6AI score0.02476EPSS
Exploits0References1
OSV
OSV
added 2019/12/13 5:15 p.m.27 views

CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

5.3CVSS1.8AI score
Exploits0References6
OSV
OSV
added 2019/12/13 5:15 p.m.2 views

ALPINE-CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

5.3CVSS6.8AI score0.02476EPSS
Exploits0References1
NVD
NVD
added 2019/12/13 5:15 p.m.21 views

CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

5.3CVSS5.1AI score0.02476EPSS
Exploits0References6
Prion
Prion
added 2019/12/13 5:15 p.m.24 views

Null pointer dereference

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

5CVSS5.1AI score0.02476EPSS
Exploits0References6Affected Software2
CVE
CVE
added 2019/12/13 4:34 p.m.101 views

CVE-2019-19722

CVE-2019-19722 affects Dovecot prior to 2.3.9.2, where a NULL pointer dereference in the push notification driver can crash the service when a crafted email uses a group address as sender or recipient. The issue is evidenced across multiple sources (CVE entry and vendor advisories) and is resolve...

5.3CVSS5.3AI score0.02476EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2019/12/13 4:34 p.m.30 views

CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

5.4AI score0.02476EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2019/12/13 4:34 p.m.28 views

CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

5.3CVSS6.4AI score0.02476EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2019/12/13 4:34 p.m.40 views

CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

5.3CVSS5.5AI score0.02476EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2019/12/13 1:8 p.m.29 views

CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

5.3CVSS1.8AI score0.02476EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2019/12/13 10:0 a.m.27 views

CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

5.3CVSS6.8AI score0.02476EPSS
Exploits0References4
OSV
OSV
added 2019/12/13 10:0 a.m.0 views

UBUNTU-CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

5.3CVSS7.1AI score0.02476EPSS
Exploits0References5
CNVD
CNVD
added 2019/12/13 12:0 a.m.1 views

Catalog Traversal Vulnerability in Coupon Pusher CMS

Push Couponer CMS is a completely free Taobao coupon website source code program, can automatically collect goods with coupons, automatically apply for high commission plan. Push Couponer CMS has a directory traversal vulnerability that can be exploited by attackers to obtain sensitive informatio...

7AI score
Exploits0
Positive Technologies
Positive Technologies
added 2019/12/13 12:0 a.m.2 views

PT-2019-15927 · Dovecot +1 · Dovecot +1

Name of the Vulnerable Software and Affected Versions: Dovecot versions prior to 2.3.9.2 Description: The issue allows an attacker to crash a push-notification driver with a crafted email when push notifications are used, due to a NULL Pointer Dereference. This can be achieved by using a group...

9.8CVSS6.2AI score0.62324EPSS
Exploits14References50
FreeBSD
FreeBSD
added 2019/12/10 12:0 a.m.34 views

dovecot -- null pointer deref in notify with empty headers

Aki Tuomi reports Mail with group address as sender will cause a signal 11 crash in push notification drivers. Group address as recipient can cause crash in some drivers...

5.3CVSS1.3AI score0.02476EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2019/12/04 3:5 p.m.26 views

CVE-2014-8178

Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for attackers to poison the image cache via a crafted image in pull or push commands...

5.5CVSS5.6AI score0.00493EPSS
Exploits0
OSV
OSV
added 2019/11/18 4:15 p.m.0 views

CVE-2019-19084

In Octopus Deploy 3.3.0 through 2019.10.4, an authenticated user with PackagePush permission to upload packages could upload a maliciously crafted package, triggering an exception that exposes underlying operating system details...

4.3CVSS5.8AI score0.00689EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2019/11/18 12:0 a.m.31 views

SYS.2.2.3.A1

Ziel des Bausteins SYS.2.2.3 ist der Schutz von Informationen, die durch und auf Windows 10-Clients verarbeiten werden. Die Basis-Anforderung SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

7.3AI score
Exploits0References1
Rows per page
Query Builder