20 matches found
Astra Linux – Vulnerability in exim4
Exim 4 before 4.94.2 has an improper neutralization of line delimiters, which is relevant in non-default configurations that enable Delivery Status Notification DSN. Certain uses of ORCPT= can cause a new line to be inserted into a spool header file, thereby indirectly allowing unauthenticated...
EUVD-2020-20517
Malware in sbrugna...
EUVD-2004-2080
Malware in sbrugna...
CVE-2024-22316
creationtimestamp| type| source ---|---|--- 2025-01-27 16:14:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113901204918639470 2025-01-27 16:16:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqdmic72f2b 2025-01-27 17:40:20+00:00| seen|...
Amazon Linux AMI : exim (ALAS-2022-1622)
The version of exim installed on the remote host is prior to 4.92-1.33. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1622 advisory. Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root in the log directory owned ...
CVE-2020-28026
Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters, relevant in non-default configurations that enable Delivery Status Notification DSN. Certain uses of ORCPT= can place a newline into a spool header file, and indirectly allow unauthenticated remote attackers to execute arbitrary...
DEBIAN-CVE-2020-28026
Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters, relevant in non-default configurations that enable Delivery Status Notification DSN. Certain uses of ORCPT= can place a newline into a spool header file, and indirectly allow unauthenticated remote attackers to execute arbitrary...
CVE-2020-28026
Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters, relevant in non-default configurations that enable Delivery Status Notification DSN. Certain uses of ORCPT= can place a newline into a spool header file, and indirectly allow unauthenticated remote attackers to execute arbitrary...
CVE-2020-28026
Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters, relevant in non-default configurations that enable Delivery Status Notification DSN. Certain uses of ORCPT= can place a newline into a spool header file, and indirectly allow unauthenticated remote attackers to execute arbitrary...
Ubuntu 16.04 ESM : Exim vulnerabilities (USN-4934-2)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4934-2 advisory. USN-4934-1 fixed several vulnerabilities in Exim. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. CVE-2020-28026...
CVE-2020-28026
Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters, relevant in non-default configurations that enable Delivery Status Notification DSN. Certain uses of ORCPT= can place a newline into a spool header file, and indirectly allow unauthenticated remote attackers to execute arbitrary...
UBUNTU-CVE-2020-28026
Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters, relevant in non-default configurations that enable Delivery Status Notification DSN. Certain uses of ORCPT= can place a newline into a spool header file, and indirectly allow unauthenticated remote attackers to execute arbitrary...
[SECURITY] Fedora 26 Update: network-manager-applet-1.8.2-1.fc26
This package contains a network control and status notification area applet for use with NetworkManager...
ymzc.cnzsjz.com XSS vulnerability
Vulnerable URL: http://ymzc.cnzsjz.com/domain/Whois.asp?domain=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check ymzc.cnzsjz.com SSL connection:| Grade: F...
[SECURITY] Fedora 24 Update: network-manager-applet-1.2.0-1.fc24
This package contains a network control and status notification area applet for use with NetworkManager...
syclo.com XSS vulnerability
Vulnerable URL: http://www.syclo.com/?domain=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 03.03.2016 Latest check for patch:| 03.03.2016 02:14 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4580123 Google...
[SECURITY] Fedora 22 Update: network-manager-applet-1.0.2-1.fc22
This package contains a network control and status notification area applet for use with NetworkManager...
Fedora 14 : NetworkManager-0.8.4-2.git20110622.fc14 (2011-8612)
This update fixes the security issue for creating shared WiFi networks. It's been tracked by 709662 - CVE-2011-2176. Before this update, NetworkManager didn't respect PolicyKit policies for creating shared WiFi networks: actions org.freedesktop.network-manager-settings.system.wifi.share.open and...
CVE-2004-2088
Sophos Anti-Virus 3.78 allows remote attackers to bypass virus scanning by using a qmail generated Delivery Status Notification DSN where the original email is not included in the bounce message...
CVE-2004-2088
Sophos Anti-Virus 3.78 is affected. The vulnerability allows remote attackers to bypass the virus scan by crafting a qmail-generated Delivery Status Notification (DSN) that omits the original email in the bounce message. The core issue is the DSN handling during bounce processing, enabling bypass...