Lucene search
K

24 matches found

RedhatCVE
RedhatCVE
added 2026/03/05 1:39 p.m.2 views

CVE-2026-27444

SEPPmail Secure Email Gateway before version 15.0.1 incorrectly interprets email addresses in the email headers, causing an interpretation conflict with other mail infrastructure that allows an attacker to fake the source of the email or decrypt it...

7.8CVSS5.9AI score0.00045EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/04 9:31 a.m.2 views

EUVD-2026-9381

SEPPmail Secure Email Gateway before version 15.0.1 does not properly verify that a PGP signature was generated by the expected key, allowing signature spoofing...

6.9CVSS5.9AI score0.00023EPSS
Exploits0References2
OSV
OSV
added 2026/03/04 9:15 a.m.2 views

CVE-2026-27445

SEPPmail Secure Email Gateway before version 15.0.1 does not properly verify that a PGP signature was generated by the expected key, allowing signature spoofing...

5.3CVSS5.8AI score0.00023EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/04 8:48 a.m.3 views

CVE-2026-2748 S/MIME Certificate Subject Whitespace

SEPPmail Secure Email Gateway before version 15.0.1 improperly validates S/MIME certificates issued for email addresses containing whitespaces, allowing signature spoofing...

7.8CVSS5.9AI score0.00025EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/04 12:0 a.m.2 views

SEPPmail Secure Email Gateway 安全漏洞

SEPPmail Secure Email Gateway is an email security gateway developed by the German company SEPPmail. Versions of SEPPmail Secure Email Gateway prior to version 15.0.1 contained security vulnerabilities. These vulnerabilities stemmed from incorrect transmission of PGP signature verification result...

6.9CVSS5.8AI score0.0001EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/03/04 12:0 a.m.3 views

PT-2026-22888

Name of the Vulnerable Software and Affected Versions SEPPmail Secure Email Gateway versions prior to 15.0.1 Description The GINA web interface does not properly validate attachment filenames within GINA-encrypted emails. This allows an attacker to potentially access files on the gateway. The iss...

9.3CVSS6AI score0.0002EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2026/03/04 12:0 a.m.4 views

PT-2026-22887

Name of the Vulnerable Software and Affected Versions SEPPmail Secure Email Gateway versions prior to 15.0.1 Description The SEPPmail Secure Email Gateway does not properly handle PDF encryption passwords, potentially allowing for operating system command execution. The issue arises from...

9.8CVSS5.9AI score0.00068EPSS
Exploits0References9
CNNVD
CNNVD
added 2026/03/04 12:0 a.m.3 views

SEPPmail Secure Email Gateway 安全漏洞

SEPPmail Secure Email Gateway is an email security gateway developed by the German company SEPPmail. Versions of SEPPmail Secure Email Gateway prior to version 15.0.1 contained security vulnerabilities. These vulnerabilities were due to improper validation of S/MIME certificates, which could lead...

7.8CVSS5.8AI score0.00025EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/04 12:0 a.m.4 views

SEPPmail Secure Email Gateway 安全漏洞

SEPPmail Secure Email Gateway is an email security gateway developed by the German company SEPPmail. Versions of SEPPmail Secure Email Gateway prior to version 15.0.1 contained security vulnerabilities. These vulnerabilities stemmed from improper verification of whether the PGP signature was...

6.9CVSS5.8AI score0.00023EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-1296

Malicious code in bioql PyPI...

8.8CVSS7.2AI score0.01735EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-0205

Malicious code in bioql PyPI...

9.3CVSS6.4AI score0.00078EPSS
Exploits0References7
OSV
OSV
added 2025/04/03 2:5 p.m.1 views

BIT-DOLIBARR-2022-0819 Code Injection in dolibarr/dolibarr

Code Injection in GitHub repository dolibarr/dolibarr prior to 15.0.1...

8.8CVSS8.9AI score0.01735EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/01/28 12:0 a.m.2 views

PT-2025-5577

Name of the Vulnerable Software and Affected Versions Hyperbridge versions prior to 15.0.1 Description A critical issue was discovered in the ismp-grandpa crate, allowing a malicious prover to easily convince the verifier of the finality of arbitrary headers. This could be used to steal funds or...

9.3CVSS6.8AI score0.00078EPSS
Exploits0References18
CNNVD
CNNVD
added 2024/04/06 12:0 a.m.1 views

IBM Personal Communications 缓冲区错误漏洞

IBM Personal Communications is a host communications and terminal emulation package for Microsoft Windows from International Business Machines IBM. Now with a full 64-bit architecture, it features Virtual Terminal VT emulation and System Network Architecture SNA application support, and provides ...

10CVSS6.4AI score0.00916EPSS
Exploits0References3
OSV
OSV
added 2022/06/06 5:0 p.m.15 views

CVE-2022-1783

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.3 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1. It may be possible for malicious group maintainers to add new members to a project within their...

2.7CVSS6.3AI score0.0047EPSS
Exploits0References5
UbuntuCve
UbuntuCve
added 2022/03/02 4:15 p.m.28 views

CVE-2022-0819

Code Injection in GitHub repository dolibarr/dolibarr prior to 15.0.1...

8.8CVSS7.1AI score0.01735EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2022/03/02 4:15 p.m.2 views

CVE-2022-0819

Code Injection in GitHub repository dolibarr/dolibarr prior to 15.0.1...

8.8CVSS7.2AI score0.01735EPSS
Exploits1References3
OSV
OSV
added 2021/08/24 7:15 p.m.0 views

CVE-2021-30918

A Lock Screen issue was addressed with improved state management. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.0.1 and iPadOS 15.0.1. A user may be able to view restricted content from the Lock Screen...

2.4CVSS6.6AI score0.0007EPSS
Exploits0References4
PyPA
PyPA
added 2020/05/07 12:15 a.m.5 views

PYSEC-2020-56

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The EC2 API doesn't have a signature TTL check for AWS Signature V4. An attacker can sniff the Authorization header, and then use it to reissue an OpenStack token an unlimited number of times...

5.5CVSS7AI score0.0014EPSS
Exploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2020/03/16 12:0 a.m.3 views

PT-2020-6069 · Yargs +4 · Yargs-Parser +4

Name of the Vulnerable Software and Affected Versions: yargs-parser versions prior to 13.1.2 yargs-parser versions prior to 15.0.1 yargs-parser versions prior to 18.1.1 Description: The issue is related to the yargs-parser library, which can be tricked into adding or modifying properties of...

9.8CVSS6.8AI score0.58883EPSS
Exploits8References92
Rows per page
Query Builder