Lucene search
+L

1963 matches found

Cvelist
Cvelist
added 2026/04/02 8:31 a.m.36 views

CVE-2026-29135 Webmail Password Tag Sanitization Bypass

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to craft a password-tag that bypasses subject sanitization...

5.3CVSS0.00252EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/04/02 8:31 a.m.7 views

CVE-2026-29135 Webmail Password Tag Sanitization Bypass

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to craft a password-tag that bypasses subject sanitization...

5.3CVSS5.9AI score0.00252EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/02 8:31 a.m.4 views

CVE-2026-29135

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to craft a password-tag that bypasses subject sanitization...

5.3CVSS5.9AI score0.00252EPSS
SaveExploits0References2
CVE
CVE
added 2026/04/02 8:31 a.m.20 views

CVE-2026-29135

SEPPmail Secure Email Gateway is affected by CVE-2026-29135: versions prior to 15.0.3 allow an attacker to craft a password-tag that bypasses subject sanitization. The issue concerns the password-tag handling in the webmail/processing flow (no explicit exploit details provided in the documents). ...

7.5CVSS5.9AI score0.00252EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/02 12:00 a.m.9 views

PT-2026-29696

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to craft a password-tag that bypasses subject sanitization...

5.3CVSS5.9AI score0.00252EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/02 12:00 a.m.16 views

PT-2026-29701

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to hide security tags from users by crafting a long subject...

5.3CVSS5.9AI score0.00189EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/02 12:00 a.m.37 views

PT-2026-29704

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forge tags such as signed OK...

7.7CVSS5.9AI score0.00212EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/04/02 12:00 a.m.16 views

SEPPmail Secure Email Gateway 安全漏洞

SEPPmail Secure Email Gateway is an email security gateway developed by the German company SEPPmail. Versions of SEPPmail Secure Email Gateway prior to version 15.0.3 contained security vulnerabilities. These vulnerabilities stemmed from a flaw that allowed attackers to hide security labels for...

5.3CVSS5.8AI score0.00189EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/02 12:00 a.m.16 views

SEPPmail Secure Email Gateway 安全漏洞

SEPPmail Secure Email Gateway is an email security gateway developed by the German company SEPPmail. Versions of SEPPmail Secure Email Gateway prior to version 15.0.3 contained security vulnerabilities. These vulnerabilities stemmed from allowing attackers to bypass subject cleanup and forge tags...

7.7CVSS5.8AI score0.00212EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/02 12:00 a.m.11 views

PT-2026-29707

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forge security tags using Unicode lookalike characters...

7.8CVSS5.9AI score0.00212EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/04/02 12:00 a.m.13 views

SEPPmail Secure Email Gateway 安全漏洞

SEPPmail Secure Email Gateway is an email security gateway developed by the German company SEPPmail. Versions of SEPPmail Secure Email Gateway prior to version 15.0.3 contained security vulnerabilities. These vulnerabilities stemmed from the ability of attackers to create password tags that...

7.5CVSS5.8AI score0.00252EPSS
SaveExploits0References1
Vivaldi Security Advisories
Vivaldi Security Advisories
added 2026/04/01 6:31 a.m.19 views

Minor update (4) for Vivaldi Desktop Browser 7.9

Download Vivaldi The following improvements were made since the third 7.9 minor update: AutoHide Panels appear too early VB-126507 AutoHide Search field does not work well with AutoHide VB-126468 MailCalendar Success SVG broken VB-126630 Chromium Update to 146.0.7680.182: includes a security fix...

8.8CVSS5.8AI score0.04938EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/04/01 12:00 a.m.11 views

Amazon Linux 2023 : gnutls, gnutls-c++, gnutls-dane (ALAS2023-2026-1529)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1529 advisory. A flaw was found in GnuTLS. This vulnerability allows a denial of service DoS by excessive CPU Central Processing Unit and memory consumption via specially crafted malicious certificates containing a...

5.3CVSS7AI score0.00638EPSS
SaveExploits1References4
Veracode
Veracode
added 2026/03/31 10:06 a.m.12 views

Improper Certificate Validation

github.com/envoyproxy/envoy is vulnerable to improper certificate validation. The vulnerability is due to incorrect handling of embedded null bytes \0 in OTHERNAME SAN values within mTLS certificate matching, which allows an attacker to bypass certificate validation and achieve unauthorized acces...

7.1CVSS5.9AI score0.0017EPSS
SaveExploits1References2Affected Software1
Snyk
Snyk
added 2026/03/30 10:36 p.m.5 views

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the processing of X.509 certificate paths with DNS name constraints when the end-entity certificate lacks a subject alternative name. An attacker can circumvent DNS name constraints by using a mixed-ca...

8.2CVSS5.9AI score0.00158EPSS
SaveExploits0References2
OSV
OSV
added 2026/03/30 9:17 p.m.12 views

ALPINE-CVE-2026-32884

Botan is a C++ cryptography library. Prior to version 3.11.0, during processing of an X.509 certificate path using name constraints which restrict the set of allowable DNS names, if no subject alternative name is defined in the end-entity certificate Botan would check that the CN was allowed by t...

5.9CVSS5.3AI score0.00158EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/03/30 9:17 p.m.11 views

CVE-2026-32884

Botan is a C++ cryptography library. Prior to version 3.11.0, during processing of an X.509 certificate path using name constraints which restrict the set of allowable DNS names, if no subject alternative name is defined in the end-entity certificate Botan would check that the CN was allowed by t...

5.9CVSS5.9AI score0.00158EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/30 8:36 p.m.5 views

CVE-2026-32884

Botan is a C++ cryptography library. Prior to version 3.11.0, during processing of an X.509 certificate path using name constraints which restrict the set of allowable DNS names, if no subject alternative name is defined in the end-entity certificate Botan would check that the CN was allowed by t...

5.9CVSS5.7AI score0.00158EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2026/03/30 8:36 p.m.16 views

CVE-2026-32884

Botan is a C++ cryptography library. Prior to version 3.11.0, during processing of an X.509 certificate path using name constraints which restrict the set of allowable DNS names, if no subject alternative name is defined in the end-entity certificate Botan would check that the CN was allowed by t...

5.9CVSS5.3AI score0.00158EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2026/03/30 8:36 p.m.10 views

CVE-2026-32884

Botan is a C++ cryptography library. Prior to version 3.11.0, during processing of an X.509 certificate path using name constraints which restrict the set of allowable DNS names, if no subject alternative name is defined in the end-entity certificate Botan would check that the CN was allowed by t...

5.9CVSS5.7AI score0.00158EPSS
SaveExploits0References1
Rows per page
Query Builder