Lucene search
K

9 matches found

Github Security Blog
Github Security Blog
added 2026/05/04 10:4 p.m.3 views

net-imap vulnerable to command Injection via "raw" arguments to multiple commands

Summary Several Net::IMAP commands accept a raw string argument that is sent to the server without validation or escaping. If this string is derived from user-controlled input, it may contain contain CRLF sequences, which an attacker can use to inject arbitrary IMAP commands. Details Net::IMAP's...

9.8CVSS5.9AI score0.00016EPSS
Exploits0References11Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/04 12:0 a.m.4 views

PT-2026-37049

Name of the Vulnerable Software and Affected Versions Net::IMAP versions prior to 0.4.24 Net::IMAP versions prior to 0.5.14 Net::IMAP versions prior to 0.6.4 Description Several commands in the Net::IMAP Ruby library accept raw string arguments that are sent to the server without validation or...

5.8CVSS5.9AI score0.00016EPSS
Exploits0References15
OSV
OSV
added 2021/06/22 9:15 p.m.0 views

CVE-2020-36394

pamsetquota.c in the pamsetquota module before 2020-05-29 for Linux-PAM allows local attackers to set their quota on an arbitrary filesystem, in certain situations where the attacker's home directory is a FUSE filesystem mounted under /home...

7CVSS5.9AI score0.00042EPSS
Exploits1References1
OSV
OSV
added 2021/06/22 9:15 p.m.0 views

UBUNTU-CVE-2020-36394

pamsetquota.c in the pamsetquota module before 2020-05-29 for Linux-PAM allows local attackers to set their quota on an arbitrary filesystem, in certain situations where the attacker's home directory is a FUSE filesystem mounted under /home...

7CVSS5.9AI score0.00042EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.17 views

Oracle: Security Advisory (ELSA-2013-0120)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4CVSS6.5AI score0.00196EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2013/01/11 12:0 a.m.12 views

RedHat Update for quota RHSA-2013:0120-01

Check for the Version of quota OpenVAS Vulnerability Test RedHat Update for quota RHSA-2013:0120-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

4CVSS0.1AI score0.00196EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2013/01/08 4:4 a.m.19 views

Low: Red Hat Security Advisory: quota security and bug fix update

An updated quota package that fixes one security issue and multiple bugs is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

4CVSS5.9AI score0.00196EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2013/01/08 12:0 a.m.22 views

RHEL 5 : quota (RHSA-2013:0120)

An updated quota package that fixes one security issue and multiple bugs is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

4CVSS5.8AI score0.00196EPSS
Exploits0References3
CVE
CVE
added 2004/07/13 4:0 a.m.47 views

CVE-2004-0669

CVE-2004-0669 affects Lotus Domino 6.5.0 and 6.5.1 when IMAP is enabled. The issue allows remote authenticated users to modify their own quota by issuing the IMAP setquota command. The connected sources confirm the affected product/version and the underlying impact is quota manipulation, with no ...

7.5CVSS6.7AI score0.00641EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder