Lucene search
+L

1641 matches found

Rockylinux
Rockylinux
added 2021/05/18 6:15 a.m.22 views

sendmail bug fix and enhancement update

An update is available for sendmail. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpris...

1.9AI score
SaveExploits0
OSV
OSV
added 2021/05/18 6:15 a.m.13 views

ALBA-2021:1858 sendmail bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

6.8AI score
SaveExploits0References1
nodejs
nodejs
added 2021/05/10 7:18 p.m.105 views

Command Injection

Overview nodemailer before version 6.4.16 is vulnerable to command injection. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails. Recommendation Upgrade to version 6.4.16 or later References - CVE - GitHub Advisory...

7.5CVSS4.1AI score0.02344EPSS
SaveExploits1Affected Software1
Github Security Blog
Github Security Blog
added 2021/05/10 7:16 p.m.96 views

Command injection in nodemailer

This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails...

9.8CVSS9.4AI score0.02344EPSS
SaveExploits1References8Affected Software1
OSV
OSV
added 2021/05/10 7:16 p.m.12 views

GHSA-48WW-J4FC-435P Command injection in nodemailer

This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails...

9.8CVSS5.9AI score0.02344EPSS
SaveExploits1References7
OpenVAS
OpenVAS
added 2021/04/04 12:00 a.m.8 views

Fedora: Security Advisory for exim (FEDORA-2021-89cb264e4d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/03/31 12:00 a.m.6 views

Fedora: Security Advisory for exim (FEDORA-2021-4eaf89b133)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/03/31 12:00 a.m.10 views

Fedora: Security Advisory for exim (FEDORA-2021-4eaf89b133)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
added 2021/03/30 12:17 a.m.20 views

[SECURITY] Fedora 34 Update: exim-4.94-7.fc34

Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...

1.5AI score
SaveExploits0
Fedora
Fedora
added 2021/01/30 1:42 a.m.102 views

[SECURITY] Fedora 32 Update: opensmtpd-6.8.0p2-1.fc32

OpenSMTPD is a FREE implementation of the server-side SMTP protocol as defi ned by RFC 5321, with some additional standard extensions. It allows ordinary machines to exchange e-mails with other systems speaking the SMTP protocol. Started out of dissatisfaction with other implementations, OpenSMTP...

7.5CVSS0.8AI score0.03578EPSS
SaveExploits0
Gitee
Gitee
added 2020/11/26 8:56 a.m.6 views

shadowbroker

This repository contains a collection of exploits and tools, including the "Lost In Translation" leak from the Shadow Brokers. The repository includes exploits for various vulnerabilities, such as RedHat 7.0-7.1 Sendmail 8.11.x, Solaris 6, 7, 8, 9 & 10, and Samba 3.0.x Linux. The exploits are...

7.8AI score
SaveExploits0
CNVD
CNVD
added 2020/11/19 12:00 a.m.9 views

Nodemailer Injection Vulnerability

Nodemailer is the Nodemailer team of a use can provide the ability to send e-mail JS code library . An injection vulnerability exists in versions of nodemailer prior to 6.4.16, which stems from the fact that the use of a carefully crafted recipient email address may result in arbitrary command fl...

9.8CVSS7.8AI score0.02344EPSS
SaveExploits1References1
Veracode
Veracode
added 2020/11/13 4:43 a.m.29 views

Command Injection

nodemailer is vulnerable to command injection. An attacker can inject malicious command flag via recipient email addresses in sendmail transport due to lack of validation for invalid email addresses...

9.8CVSS3.8AI score0.02344EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2020/11/12 6:15 p.m.23 views

CVE-2020-28247

The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.rs...

5.3CVSS5.6AI score0.01522EPSS
SaveExploits0References3
OSV
OSV
added 2020/11/12 6:15 p.m.14 views

CVE-2020-28247

The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.rs...

5.3CVSS5.7AI score
SaveExploits0References3
Prion
Prion
added 2020/11/12 6:15 p.m.18 views

Design/Logic Flaw

The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.rs...

5CVSS5.6AI score0.01522EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2020/11/12 6:03 p.m.35 views

CVE-2020-28247

The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.rs...

5.5AI score0.01522EPSS
SaveExploits0References3
OSV
OSV
added 2020/11/12 9:15 a.m.18 views

CVE-2020-7769

This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails...

9.8CVSS7.3AI score
SaveExploits0References4
NVD
NVD
added 2020/11/12 9:15 a.m.18 views

CVE-2020-7769

This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails...

9.8CVSS9.6AI score0.02344EPSS
SaveExploits1References4
OSV
OSV
added 2020/11/12 9:15 a.m.2 views

DEBIAN-CVE-2020-7769

This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails...

9.8CVSS8.8AI score0.02344EPSS
SaveExploits1References1
Rows per page
Query Builder