Lucene search
+L

5949 matches found

OSV
OSV
added 2024/03/19 2:04 p.m.11 views

CVE-2024-29128 WordPress POST SMTP Mailer plugin <= 2.8.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Post SMTP POST SMTP allows Reflected XSS.This issue affects POST SMTP: from n/a through 2.8.6...

7.1CVSS6AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/03/19 2:04 p.m.17 views

CVE-2024-29128 WordPress POST SMTP Mailer plugin <= 2.8.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Post SMTP POST SMTP allows Reflected XSS.This issue affects POST SMTP: from n/a through 2.8.6...

7.1CVSS5.2AI score0.00382EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/19 2:04 p.m.96 views

CVE-2024-29128

The CVE-2024-29128 entry concerns the WordPress Post SMTP Mailer plugin. Affected software: Post SMTP plugin versions n/a through 2.8.6. Root cause: Improper neutralization of input during web page generation, yielding Reflected Cross‑Site Scripting (XSS). Impact: unauthenticated attackers could ...

7.1CVSS5.2AI score0.00382EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/03/19 12:00 a.m.39 views

CVE-2024-28092

UBEE DDW365 XCNDDW365 8.14.3105 software on hardware 3.13.1 allows a remote attacker within Wi-Fi proximity to conduct stored XSS attacks via RgFirewallEL.asp, RgDdns.asp, RgTime.asp, RgDiagnostics.asp, or RgParentalBasic.asp. The affected fields are SMTP Server Name, SMTP Username, Host Name, Ti...

5.8AI score0.00529EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/19 12:00 a.m.12 views

WordPress Plugin POST SMTP Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

7.1CVSS5.8AI score0.00382EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/03/19 12:00 a.m.19 views

PT-2024-22749 · Post Smtp · Post Smtp

Name of the Vulnerable Software and Affected Versions: Post SMTP versions n/a through 2.8.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations: For versions n/a throug...

7.1CVSS6.8AI score0.00382EPSS
SaveExploits0References6
OSV
OSV
added 2024/03/18 2:15 a.m.12 views

CVE-2023-52159

A stack-based buffer overflow vulnerability in gross 0.9.3 through 1.x before 1.0.4 allows remote attackers to trigger a denial of service grossd daemon crash or potentially execute arbitrary code in grossd via crafted SMTP transaction parameters that cause an incorrect strncat for a log entry...

7.5CVSS8AI score
SaveExploits0References2
OSV
OSV
added 2024/03/18 2:15 a.m.6 views

DEBIAN-CVE-2023-52159

A stack-based buffer overflow vulnerability in gross 0.9.3 through 1.x before 1.0.4 allows remote attackers to trigger a denial of service grossd daemon crash or potentially execute arbitrary code in grossd via crafted SMTP transaction parameters that cause an incorrect strncat for a log entry...

7.5CVSS8.3AI score0.01055EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/18 2:15 a.m.31 views

CVE-2023-52159

A stack-based buffer overflow vulnerability in gross 0.9.3 through 1.x before 1.0.4 allows remote attackers to trigger a denial of service grossd daemon crash or potentially execute arbitrary code in grossd via crafted SMTP transaction parameters that cause an incorrect strncat for a log entry...

7.5CVSS7.9AI score0.01055EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2024/03/18 2:15 a.m.29 views

CVE-2023-52159

A stack-based buffer overflow vulnerability in gross 0.9.3 through 1.x before 1.0.4 allows remote attackers to trigger a denial of service grossd daemon crash or potentially execute arbitrary code in grossd via crafted SMTP transaction parameters that cause an incorrect strncat for a log entry...

7.5CVSS7.8AI score0.01055EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/03/18 12:00 a.m.21 views

CVE-2023-52159

A stack-based buffer overflow vulnerability in gross 0.9.3 through 1.x before 1.0.4 allows remote attackers to trigger a denial of service grossd daemon crash or potentially execute arbitrary code in grossd via crafted SMTP transaction parameters that cause an incorrect strncat for a log entry...

8.3AI score0.01055EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2024/03/18 12:00 a.m.71 views

CVE-2023-52159

A stack-based buffer overflow vulnerability in gross 0.9.3 through 1.x before 1.0.4 allows remote attackers to trigger a denial of service grossd daemon crash or potentially execute arbitrary code in grossd via crafted SMTP transaction parameters that cause an incorrect strncat for a log entry...

7.5CVSS8AI score0.01055EPSS
SaveExploits0
Cvelist
Cvelist
added 2024/03/18 12:00 a.m.41 views

CVE-2023-52159

A stack-based buffer overflow vulnerability in gross 0.9.3 through 1.x before 1.0.4 allows remote attackers to trigger a denial of service grossd daemon crash or potentially execute arbitrary code in grossd via crafted SMTP transaction parameters that cause an incorrect strncat for a log entry...

8.2AI score0.01055EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/03/16 12:00 a.m.26 views

WordPress Post SMTP Plugin <= 2.8.6 is vulnerable to Cross Site Scripting (XSS)

Software Post SMTP Type Plugin Vulnerable versions = 2.8.6 Fixed in 2.8.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29128 Patch priority Medium CVSS severity Medium 7.1 Developer WPExperts PSID d4415453cdb3 Credits Le Ngoc Anh Required privilege Unauthenticat...

7.1CVSS6.6AI score0.00382EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/03/15 1:15 p.m.31 views

CVE-2024-27192

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scott Reilly Configure SMTP allows Reflected XSS.This issue affects Configure SMTP: from n/a through 3.1...

7.1CVSS6.9AI score0.00354EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/15 12:44 p.m.71 views

CVE-2024-27192

CVE-2024-27192 : The connected sources document a WordPress plugin vulnerability in Configure SMTP (WordPress plugin) that allows Reflected XSS due to improper input neutralization during web page generation. Affected versions are listed as up through 3.1. Exploitation details (vector/conditions)...

7.1CVSS8.6AI score0.00354EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/15 12:44 p.m.19 views

CVE-2024-27192 WordPress Configure SMTP Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scott Reilly Configure SMTP allows Reflected XSS.This issue affects Configure SMTP: from n/a through 3.1...

7.1CVSS6.9AI score0.00354EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/15 12:44 p.m.43 views

CVE-2024-27192 WordPress Configure SMTP Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scott Reilly Configure SMTP allows Reflected XSS.This issue affects Configure SMTP: from n/a through 3.1...

7.1CVSS7.1AI score0.00354EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/15 11:06 a.m.7 views

OESA-2024-1276 python-aiosmtpd security update

This is a server for SMTP and related protocols, similar in utility to the standard library's smtpd.py module, but rewritten to be based on asyncio for Python 3. Security Fixes: aiosmtpd is a reimplementation of the Python stdlib smtpd.py based on asyncio. aiosmtpd is vulnerable to inbound SMTP...

5.3CVSS6.9AI score0.00374EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/15 12:00 a.m.5 views

WordPress plugin Configure SMTP Cross Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

7.1CVSS5.9AI score0.00354EPSS
SaveExploits0References3
Rows per page
Query Builder