org.apache.james:james-server-container-spring (3.0-m1), org.apache.james:james-server-dnsservice-dnsjava (3.0-m1) +2 more potentially affected by CVE-2024-25638 via dnsjava:dnsjava (2.0.7)

dnsjava:dnsjava MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on dnsjava:dnsjava and may be impacted: - org.apache.james:james-server-container-spring 3.0-m1 - org.apache.james:james-server-dnsservice-dnsjava 3.0-m1 -...

NETGEAR SRX5308 Cross-Site Scripting Vulnerability (CNVD-2023-43028)

The NETGEAR SRX5308 is a VPN firewall appliance from NETGEAR. The NETGEAR SRX5308 suffers from a cross-site scripting vulnerability that originates from incorrect manipulation of the parameter smtpServer.toAddr. The vulnerability can be exploited by an attacker to obtain sensitive information suc...

Reolink RLC-410W device TestEmail out-of-bounds write vulnerability

Summary An out-of-bounds write vulnerability exists in the device TestEmail functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted network request can lead to an out-of-bounds write. An attacker can send an HTTP request to trigger this vulnerability. Tested Versions Reolink...