Most recent entries from all

bdu:2024-04513

certfr-2025-avi-0756 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer…

certfr-2025-avi-0756

cnvd-2024-22236

EUVD-2026-237757

fkie_cve-2024-21742

Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message. This can be exploited by an attacker to add unintended headers to MIME messages.

GHSA-jw7r-rxff-gv24 — Apache James MIME4J improper input validation vulnerability

Affected: Maven: org.apache.james:apache-mime4j-core

Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message. This can be exploited by an attacker to add unintended headers to MIME messages.

gsd-2024-21742

OESA-2024-1333 — apache-mime4j security update

Affected: openEuler:22.03-LTS-SP3: apache-mime4j

Java stream based MIME message parser. Security Fix(es): Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message. This can be exploited by an attacker to add unintended headers to MIME messages. (CVE-2024-21742)

UBUNTU-CVE-2024-21742

Affected: Ubuntu:16.04:LTS: apache-mime4j, Ubuntu:18.04:LTS: apache-mime4j, Ubuntu:20.04:LTS: apache-mime4j, Ubuntu:22.04:LTS: apache-mime4j, Ubuntu:24.04:LTS: apache-mime4j, Ubuntu:25.10: apache-mime4j, Ubuntu:26.04:LTS: apache-mime4j

Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message. This can be exploited by an attacker to add unintended headers to MIME messages.

WID-SEC-W-2024-1641 — Oracle Construction and Engineering: Mehrere Schwachstellen

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Construction and Engineering ausnutzen, um die Vertraulichkeit und Integrität zu gefährden.