Lucene search
+L

375 matches found

Hacker One
Hacker One
added 2020/07/07 7:39 p.m.136 views

Kubernetes: Fake email from <any_name>@kubernetes.io to any other email

Hi, I just found an issue No Valid SPF Records in your mail server @kubernetes.io Desciprition : There is a email spoofing vulnerability.Email spoofing is the forgery of an email header so that the message appears to have originated from someone or somewhere other than the actual source. Email...

0.1AI score
Exploits0
Hacker One
Hacker One
added 2020/07/05 9:31 p.m.21 views

Engel & Völkers Technology GmbH: SPF Misconfiguration

There is a email spoofing vulnerability. Email spoofing is the forgery of an email header so that the message appears to have originated from someone or somewhere other than the actual source. Email spoofing is a tactic used in phishing and spam campaigns because people are more likely to open an...

7.1AI score
Exploits0
Hacker One
Hacker One
added 2020/05/02 10:55 a.m.26 views

Kubernetes: There is any issue No valid SPF Records

There is a email spoofing vulnerability.Email spoofing is the forgery of an email header so that the message appears to have originated from someone or somewhere other than the actual source. Email spoofing is a tactic used in phishing and spam campaigns because people are more likely to open an...

7.1AI score
Exploits0
NVD
NVD
added 2020/04/27 2:15 p.m.24 views

CVE-2019-20790

OpenDMARC through 1.3.2 and 1.4.x, when used with pypolicyd-spf 2.0.2, allows attacks that bypass SPF and DMARC authentication in situations where the HELO field is inconsistent with the MAIL FROM field...

9.8CVSS9.7AI score0.02658EPSS
Exploits1References5
OSV
OSV
added 2020/04/27 2:15 p.m.29 views

CVE-2019-20790

OpenDMARC through 1.3.2 and 1.4.x, when used with pypolicyd-spf 2.0.2, allows attacks that bypass SPF and DMARC authentication in situations where the HELO field is inconsistent with the MAIL FROM field...

9.8CVSS7AI score
Exploits0References5
OSV
OSV
added 2020/04/27 2:15 p.m.24 views

CVE-2020-12272

OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false information about the domain that originated an e-mail message. This is caused by incorrect parsing and interpretation of SPF/DKIM authentication results, as demonstrated by the...

5.3CVSS6.5AI score
Exploits0References5
Prion
Prion
added 2020/04/27 2:15 p.m.17 views

Spoofing

OpenDMARC through 1.3.2 and 1.4.x, when used with pypolicyd-spf 2.0.2, allows attacks that bypass SPF and DMARC authentication in situations where the HELO field is inconsistent with the MAIL FROM field...

6.8CVSS9.5AI score0.02658EPSS
Exploits1References5Affected Software3
UbuntuCve
UbuntuCve
added 2020/04/27 2:15 p.m.18 views

CVE-2019-20790

OpenDMARC through 1.3.2 and 1.4.x, when used with pypolicyd-spf 2.0.2, allows attacks that bypass SPF and DMARC authentication in situations where the HELO field is inconsistent with the MAIL FROM field...

9.8CVSS7.2AI score0.02658EPSS
Exploits1References4
UbuntuCve
UbuntuCve
added 2020/04/27 2:15 p.m.27 views

CVE-2020-12272

OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false information about the domain that originated an e-mail message. This is caused by incorrect parsing and interpretation of SPF/DKIM authentication results, as demonstrated by the...

5.3CVSS6.4AI score0.02136EPSS
Exploits1References4
Prion
Prion
added 2020/04/27 2:15 p.m.24 views

Authentication flaw

OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false information about the domain that originated an e-mail message. This is caused by incorrect parsing and interpretation of SPF/DKIM authentication results, as demonstrated by the...

5CVSS7.1AI score0.02136EPSS
Exploits1References5Affected Software2
Cvelist
Cvelist
added 2020/04/27 2:0 p.m.30 views

CVE-2019-20790

OpenDMARC through 1.3.2 and 1.4.x, when used with pypolicyd-spf 2.0.2, allows attacks that bypass SPF and DMARC authentication in situations where the HELO field is inconsistent with the MAIL FROM field...

9.6AI score0.02658EPSS
Exploits1References5
Debian CVE
Debian CVE
added 2020/04/27 2:0 p.m.53 views

CVE-2019-20790

OpenDMARC through 1.3.2 and 1.4.x, when used with pypolicyd-spf 2.0.2, allows attacks that bypass SPF and DMARC authentication in situations where the HELO field is inconsistent with the MAIL FROM field...

9.8CVSS9.7AI score0.02658EPSS
Exploits1
CVE
CVE
added 2020/04/27 2:0 p.m.94 views

CVE-2019-20790

CVE-2019-20790 affects OpenDMARC prior to 1.4.1, and OpenDMARC 1.3.2 and 1.4.x when used with pypolicyd-spf 2.0.2, enabling attacks that bypass SPF and DMARC authentication when HELO is inconsistent with MAIL FROM. Connected sources confirm this vulnerability, its impact is authentication bypass ...

9.8CVSS9.4AI score0.02658EPSS
Exploits1References5Affected Software2
Cvelist
Cvelist
added 2020/04/27 12:0 a.m.33 views

CVE-2020-12272

OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false information about the domain that originated an e-mail message. This is caused by incorrect parsing and interpretation of SPF/DKIM authentication results, as demonstrated by the...

7.2AI score0.02136EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2020/04/27 12:0 a.m.9 views

PT-2020-6916 · Opendmarc +2 · Opendmarc +2

Name of the Vulnerable Software and Affected Versions: OpenDMARC versions 1.3.2 and 1.4.x Description: The issue is related to the incorrect parsing and interpretation of SPF/DKIM authentication results, allowing attacks to inject false information about the domain that originated an e-mail...

9.8CVSS7.1AI score0.03684EPSS
Exploits2References34
CVE
CVE
added 2020/04/27 12:0 a.m.87 views

CVE-2020-12272

OpenDMARC, versions up to 1.3.2 and 1.4.x, is affected by CVE-2020-12272. The flaw arises from incorrect parsing/interpretation of SPF/DKIM authentication results, enabling attacks that inject authentication results to provide false information about the domain that originated an email. This can ...

5.3CVSS7AI score0.02136EPSS
Exploits1References5Affected Software1
Debian CVE
Debian CVE
added 2020/04/27 12:0 a.m.44 views

CVE-2020-12272

OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false information about the domain that originated an e-mail message. This is caused by incorrect parsing and interpretation of SPF/DKIM authentication results, as demonstrated by the...

5.3CVSS5.7AI score0.02136EPSS
Exploits1
ThreatPost
ThreatPost
added 2020/04/01 1:27 p.m.55 views

Top Email Protections Fail in Latest COVID-19 Phishing Campaign

Threat actors continue to capitalize on fears surrounding the spread of the COVID-19 virus through a surge in new phishing campaigns that use spoofing tactics to effectively evade Proofpoint and Microsoft Office 365 advanced threat protections ATPs, researchers have found. The Cofense Phishing...

0.2AI score
Exploits0References11
Hacker One
Hacker One
added 2020/02/11 12:14 p.m.121 views

Nextcloud: Email Spoofing

An SPF/DMARC record is a type of Domain Name Service DNS record that identifies which mail servers are permitted to send email on behalf of your domain. The purpose of an SPF/DMARC record is to prevent spammers from sending messages on the behalf of your organization. Remediation: Create a SPF...

2.2AI score
Exploits0
Hacker One
Hacker One
added 2020/01/15 1:48 p.m.220 views

Kubernetes: No valid SPF record found

Desciprition : There is a email spoofing vulnerability.Email spoofing is the forgery of an email header so that the message appears to have originated from someone or somewhere other than the actual source. Email spoofing is a tactic used in phishing and spam campaigns because people are more...

7.1AI score
Exploits0
Rows per page
Query Builder