Lucene search
+L

1651 matches found

Positive Technologies
Positive Technologies
added 2024/05/15 12:00 a.m.11 views

PT-2024-40011 · Zend +1 · Zend Framework 1 +1

Name of the Vulnerable Software and Affected Versions: Zend Framework 1 affected versions not specified Magento 1 affected versions not specified Description: The issue allows for remote code execution and is considered critical, although few systems are affected. To be vulnerable, the installati...

7.9AI score
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:00 a.m.53 views

RHEL 7 : sendmail (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - sendmail: SMTP smuggling vulnerability CVE-2023-51765 Note that Nessus has not tested for this issue but has instea...

5.3AI score0.01082EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:00 a.m.35 views

RHEL 6 : sendmail (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - sendmail: SMTP smuggling vulnerability CVE-2023-51765 Note that Nessus has not tested for this issue but has instea...

5.3AI score0.01082EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
added 2024/05/10 12:00 a.m.33 views

AIX (IJ50432)

The version of AIX installed on the remote host is prior to APAR IJ50432. It is, therefore, affected by a vulnerability as referenced in the IJ50432 advisory. - sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to...

5.3CVSS5.7AI score0.01082EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2024/05/10 12:00 a.m.64 views

AIX (IJ50424)

The version of AIX installed on the remote host is prior to APAR IJ50424. It is, therefore, affected by a vulnerability as referenced in the IJ50424 advisory. - sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to...

5.3CVSS5.7AI score0.01082EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2024/05/10 12:00 a.m.29 views

AIX (IJ50433)

The version of AIX installed on the remote host is prior to APAR IJ50433. It is, therefore, affected by a vulnerability as referenced in the IJ50433 advisory. - sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to...

5.3CVSS5.7AI score0.01082EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2024/05/10 12:00 a.m.41 views

AIX (IJ50428)

The version of AIX installed on the remote host is prior to APAR IJ50428. It is, therefore, affected by a vulnerability as referenced in the IJ50428 advisory. - sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to...

5.3CVSS5.7AI score0.01082EPSS
SaveExploits2References3
IBM Security Bulletins
IBM Security Bulletins
added 2024/04/18 4:10 p.m.100 views

Security Bulletin: AIX is vulnerable to email spoofing due to sendmail (CVE-2023-51765)

Summary Vulnerability in sendmail could allow a remote attacker to spoof an email CVE-2023-51765. Vulnerability Details CVEID:CVE-2023-51765 DESCRIPTION: Proofpoint sendmail is vulnerable to SMTP smuggling, caused by improper handling of line endings . in an email message. By sending a specially...

5.3CVSS5.7AI score0.01082EPSS
SaveExploits2Affected Software2
IBM AIX
IBM AIX
added 2024/04/11 3:33 p.m.105 views

AIX is vulnerable to email spoofing due to sendmail (CVE-2023-51765)

IBM SECURITY ADVISORY First Issued: Thu Apr 11 15:33:45 CDT 2024 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/sendmailadvisory4.asc Security Bulletin: AIX is vulnerable to email spoofing due to sendmail CVE-2023-51765...

5.3CVSS5.8AI score0.01082EPSS
SaveExploits2
Redos
Redos
added 2024/04/08 12:00 a.m.42 views

ROS-20240408-16

A vulnerability in SendMail SMTP Server software is related to insufficient data authentication data. Exploitation of the vulnerability could allow a remote attacker to bypass the security mechanism and inject e-mail messages with a spoofed MAIL FROM address. security mechanism and inject e-mail...

5.3CVSS6.9AI score0.01082EPSS
SaveExploits2
BDU FSTEC
BDU FSTEC
added 2024/03/27 12:00 a.m.9 views

The vulnerability of the SendMail SMTP server’s software lies in the insufficient verification of data authenticity. This allows attackers to bypass security measures and send emails with fake MAIL FROM addresses.

The vulnerability of the SendMail SMTP server software is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to bypass security mechanisms and send emails with fake MAIL FROM addresses...

5.3CVSS5.9AI score0.01082EPSS
SaveExploits2References8Affected Software4
OpenVAS
OpenVAS
added 2024/03/08 12:00 a.m.21 views

openSUSE Security Advisory (SUSE-SU-2024:0743-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS5.3AI score0.01082EPSS
SaveExploits2References4
Tenable Nessus
Tenable Nessus
added 2024/03/07 12:00 a.m.33 views

SUSE SLES12 Security Update : sendmail (SUSE-SU-2024:0742-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:0742-1 advisory. - CVE-2023-51765: Fixed new SMTP smuggling attack. bsc1218351 Tenable has extracted the preceding description block directly from the SUSE...

5.3CVSS6.1AI score0.01082EPSS
SaveExploits2References4
Tenable Nessus
Tenable Nessus
added 2024/03/05 12:00 a.m.30 views

SUSE SLED15: libmilter-doc / libmilter1_0 / rmail / sendmail / sendmail-devel / etc (SUSE-SU-2024:0743-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0743-1 advisory. - CVE-2023-51765: Fixed new SMTP smuggling attack. bsc1218351 Tenable has extracted the preceding...

5.3CVSS6.1AI score0.01082EPSS
SaveExploits2References4
OSV
OSV
added 2024/03/01 8:44 p.m.3 views

SUSE-SU-2024:0743-1 Security update for sendmail

This update for sendmail fixes the following issues: - CVE-2023-51765: Fixed new SMTP smuggling attack. bsc1218351...

5.3CVSS5.2AI score0.01082EPSS
SaveExploits2References3
OSV
OSV
added 2024/03/01 8:41 p.m.2 views

SUSE-SU-2024:0742-1 Security update for sendmail

This update for sendmail fixes the following issues: - CVE-2023-51765: Fixed new SMTP smuggling attack. bsc1218351...

5.3CVSS5.2AI score0.01082EPSS
SaveExploits2References3
Veracode
Veracode
added 2024/02/19 2:04 a.m.33 views

SMTP Smuggling

sendmail is vulnerable to SMTP Smuggling. The vulnerability is due to injecting email messages with a spoofed MAIL FROM address using sendmail supports . sequence which allows malicious emails to be accepted as legitimate and leads to bypass of SPF protection mechanisms...

5.3CVSS6.6AI score0.01082EPSS
SaveExploits2References18Affected Software1
Photon
Photon
added 2024/02/06 12:00 a.m.31 views

Moderate Photon OS Security Update - PHSA-2024-4.0-0560

Updates of 'sendmail' packages of Photon OS have been released...

5.3CVSS10AI score0.01082EPSS
SaveExploits2
OSV
OSV
added 2024/02/02 8:43 p.m.35 views

GHSA-6H78-85V2-MMCH PHPMailer Shell command injection

PHPMailer before 1.7.4, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php. Impact Shell command injection, remotely exploitable if host application does not filter user data...

6.8CVSS7.2AI score0.02407EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2024/02/02 8:43 p.m.40 views

PHPMailer Shell command injection

PHPMailer before 1.7.4, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php. Impact Shell command injection, remotely exploitable if host application does not filter user data...

6.8CVSS7.8AI score0.02407EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder