All CVEs — page 253 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This vulnerability allows attackers to perform blind SQL injection attacks against the Vitepos lite application by not properly neutralizing special elements in SQL commands. This creates a high-risk vector for data manipulation and potential unauthorized access.
The flaw allows sensitive information to be inserted into sent data, potentially leading to data leakage or manipulation.
The flaw allows unauthorized access to functionality not properly constrained by ACLs, enabling potential data theft, manipulation, or system compromise.
The hMailServer software has an inefficient algorithm that causes excessive CPU usage when processing bounce and complaint messages with many leading blank lines in headers, potentially leading to denial of service by keeping delivery threads busy for extended periods.
A flaw in Progressive Robot hMailServer allows remote attackers to cause indefinite loops during MIME message processing, leading to complete service unavailability. The vulnerability occurs when processing malformed MIME headers with empty parameters followed by semicolons, causing worker threads to hang indefinitely.
The Progressive Robot hMailServer has an inefficient algorithm in its DKIM and ARC signature verification that causes excessive CPU usage when processing messages with many header fields or folded lines. This allows a remote attacker to perform a denial-of-service attack by sending specially crafted messages that keep worker threads busy for tens of seconds per signature.
The Progressive Robot hMailServer has an inefficient JSON reader that causes quadratic time complexity when processing JSON objects with duplicate member names, allowing remote attackers to crash the mail service by sending specially crafted TLS-RPT reports or using the webmail REST API.
A local authenticated user can read sensitive mail server data due to overly permissive default folder and file permissions created during installation. This allows access to stored messages, logs, password hashes, and configuration files that contain database passwords.