Lucene search
K

8 matches found

OSV
OSV
added 2024/07/31 9:15 p.m.5 views

CVE-2024-40464

An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smtp.go file...

8.8CVSS7AI score
Exploits0References1
NVD
NVD
added 2024/07/31 9:15 p.m.12 views

CVE-2024-40464

An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smtp.go file...

8.8CVSS0.00751EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/07/31 12:0 a.m.14 views

CVE-2024-40464

An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smtp.go file...

0.00751EPSS
Exploits0References1
CVE
CVE
added 2024/07/31 12:0 a.m.273 views

CVE-2024-40464

CVE-2024-40464 affects beego v2.2.0 and earlier. A remote attacker can escalate privileges via the sendMail function in beego/core/logs/smtp.go due to improper validation in OpenSSL certificate handling. Public sources describe privilege escalation through this path, with IBM/X-Force listing a hi...

8.8CVSS7.3AI score0.00751EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/07/31 12:0 a.m.1 views

PT-2024-28857 · Beego · Beego

Name of the Vulnerable Software and Affected Versions: beego versions 2.2.0 and earlier Description: An issue in beego allows a remote attacker to escalate privileges via the sendMail function located in the beego/core/logs/smtp.go file. Recommendations: For beego versions 2.2.0 and earlier,...

8.8CVSS7.2AI score0.00751EPSS
Exploits0References11
NVD
NVD
added 2024/07/27 2:15 a.m.16 views

CVE-2024-6431

The Media.net Ads Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and missing capability check in the 'sendMail' function in all versions up to, and including, 2.10.13. This makes it possible for authenticated attackers, with subscriber-lev...

8.8CVSS0.107EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/07/27 12:0 a.m.1 views

WordPress plugin Media.net Ads Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS6.8AI score0.107EPSS
Exploits0References3
Cvelist
Cvelist
added 2007/08/27 9:0 p.m.16 views

CVE-2007-4538

emailin.pl in Bugzilla 2.23.4 through 3.0.0 allows remote attackers to execute arbitrary commands via the -f From address option to the Email::Send::Sendmail function, probably involving shell metacharacters...

7.4AI score0.0087EPSS
Exploits1References11
Rows per page
Query Builder