Lucene search
+L

1817 matches found

Rockylinux
Rockylinux
•added 2021/05/18 6:15 a.m.•27 views

sendmail bug fix and enhancement update

An update is available for sendmail. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpris...

1.9AI score
SaveExploits0
AlmaLinux
AlmaLinux
•added 2021/05/18 6:15 a.m.•32 views

sendmail bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

1.2AI score
SaveExploits0References1
osv_alba
osv_alba
•added 2021/05/18 6:15 a.m.•23 views

ALBA-2021:1858 sendmail bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

6.8AI score
SaveExploits0References1
nodejs
nodejs
•added 2021/05/10 7:18 p.m.•119 views

Command Injection

Overview nodemailer before version 6.4.16 is vulnerable to command injection. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails. Recommendation Upgrade to version 6.4.16 or later References - CVE - GitHub Advisory...

7.5CVSS4.1AI score0.02303EPSS
SaveExploits1Affected Software1
Github Security Blog
Github Security Blog
•added 2021/05/10 7:16 p.m.•113 views

Command injection in nodemailer

This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails...

9.8CVSS9.4AI score0.02303EPSS
SaveExploits1References8Affected Software1
osv_ghsa
osv_ghsa
•added 2021/05/10 7:16 p.m.•21 views

GHSA-48WW-J4FC-435P Command injection in nodemailer

This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails...

9.8CVSS5.9AI score0.02303EPSS
SaveExploits1References7
OpenVAS
OpenVAS
•added 2021/04/04 12:00 a.m.•14 views

Fedora: Security Advisory for exim (FEDORA-2021-89cb264e4d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/03/31 12:00 a.m.•17 views

Fedora: Security Advisory for exim (FEDORA-2021-4eaf89b133)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/03/31 12:00 a.m.•14 views

Fedora: Security Advisory for exim (FEDORA-2021-4eaf89b133)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
•added 2021/03/30 12:17 a.m.•22 views

[SECURITY] Fedora 34 Update: exim-4.94-7.fc34

Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...

1.5AI score
SaveExploits0
Fedora
Fedora
•added 2021/01/30 1:42 a.m.•112 views

[SECURITY] Fedora 32 Update: opensmtpd-6.8.0p2-1.fc32

OpenSMTPD is a FREE implementation of the server-side SMTP protocol as defi ned by RFC 5321, with some additional standard extensions. It allows ordinary machines to exchange e-mails with other systems speaking the SMTP protocol. Started out of dissatisfaction with other implementations, OpenSMTP...

7.5CVSS0.8AI score0.03652EPSS
SaveExploits0
Gitee
Gitee
•added 2020/11/26 8:56 a.m.•16 views

shadowbroker

This repository contains a collection of exploits and tools, including the "Lost In Translation" leak from the Shadow Brokers. The repository includes exploits for various vulnerabilities, such as RedHat 7.0-7.1 Sendmail 8.11.x, Solaris 6, 7, 8, 9 & 10, and Samba 3.0.x Linux. The exploits are...

7.8AI score
SaveExploits0
CNVD
CNVD
•added 2020/11/19 12:00 a.m.•20 views

Nodemailer Injection Vulnerability

Nodemailer is the Nodemailer team of a use can provide the ability to send e-mail JS code library . An injection vulnerability exists in versions of nodemailer prior to 6.4.16, which stems from the fact that the use of a carefully crafted recipient email address may result in arbitrary command fl...

9.8CVSS7.8AI score0.02303EPSS
SaveExploits1References1
Veracode
Veracode
•added 2020/11/13 4:43 a.m.•32 views

Command Injection

nodemailer is vulnerable to command injection. An attacker can inject malicious command flag via recipient email addresses in sendmail transport due to lack of validation for invalid email addresses...

9.8CVSS3.8AI score0.02303EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2020/11/12 6:15 p.m.•33 views

CVE-2020-28247

The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.rs...

5.3CVSS5.6AI score0.01522EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2020/11/12 6:15 p.m.•23 views

CVE-2020-28247

The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.rs...

5.3CVSS5.7AI score
SaveExploits0References3
Prion
Prion
•added 2020/11/12 6:15 p.m.•28 views

Design/Logic Flaw

The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.rs...

5CVSS5.6AI score0.01522EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2020/11/12 6:03 p.m.•46 views

CVE-2020-28247

The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.rs...

5.5AI score0.01522EPSS
SaveExploits0References3
Mend
Mend
•added 2020/11/12 6:03 p.m.•7 views

CVE-2020-28247

The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.rs...

6.9CVSS0.01522EPSS
SaveExploits0References7
NVD
NVD
•added 2020/11/12 9:15 a.m.•24 views

CVE-2020-7769

This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails...

9.8CVSS9.6AI score0.02303EPSS
SaveExploits1References4
Rows per page
Query Builder