Veille CVE

Recherche « exim »

14 CVE

Critique 4 Élevée 4 Moyenne 6 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « exim » ✕
  1. CVE-2026-94057 5.3 Moyenne

    Exim · Exim exim

    Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing.

  2. CVE-2026-94056 7.5 Élevée

    Exim · Exim exim

    Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory.

  3. CVE-2026-94055 5.3 Moyenne

    Exim · Exim exim

    Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.

  4. CVE-2026-94054 5.3 Moyenne

    Exim · Exim exim

    Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.

  5. CVE-2026-9615 4.3 Moyenne

    flextheme Flex Import

    The Flex Import plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.0. This is due to the license_activate_fleximp() and license_deactivate_fleximp() functions, hooked to the wp_ajax_license_activate_fleximp and wp_ajax_license_deactivate_fleximp AJAX actions, lacking both a capability check (current_user_can()) and nonce verification (the client-side script sends a 'wpnonce' value but the handlers never validate it). This makes it possible for authenticated attackers, with subscriber-level access and above, to activate an arbitrary/fraudulent license key (persisting it via update_option('fleximp_is_premium') and toggling validation, suspension, and bundle status options) or deactivate the site's legitimate license (deleting the stored key and setting fleximp_validation_status to false), thereby disrupting the plugin's premium functionality.

  6. CVE-2026-66141 7.8 Élevée

    Exim · Exim exim

    Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.

  7. CVE-2026-66140 7.8 Élevée

    Exim · Exim exim

    Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled.

  8. CVE-2026-48840 5.3 Moyenne

    Exim · Exim exim

    Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client.

  9. CVE-2026-45185 9.8 Critique

    Exim · Exim exim

    Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS close_notify mid-body during a CHUNKING transfer, followed by a final cleartext byte on the same TCP connection. This can lead to heap corruption. An unauthenticated network attacker exploiting this vulnerability could execute arbitrary code.

  10. CVE-2026-40687 9.1 Critique

    Exim · Exim exim

    In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA resource, there can be an out-of-bounds write that crashes the connection instance, or erroneous data processing that divulges data from uninitialized heap memory.

  11. CVE-2026-40686 5.3 Moyenne

    Exim · Exim exim

    In Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large UTF-8 trailing characters are present (malformed UTF-8 header data). Information might be divulged within an error message produced during handling of an unrelated e-mail message.

  12. CVE-2026-40685 9.8 Critique

    Exim · Exim exim

    In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untrusted header, because of an incorrect implementation of \ skipping.

  13. CVE-2026-40684 7.5 Élevée

    Exim · Exim exim

    In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the connection instance when malformed DNS data is present in PTR records. This is caused by a dn_expand oddity in octal printing.

  14. CVE-2019-10149 9.8 Critique Exploitée

    exim · Exim exim · Canonical ubuntu linux · Debian debian linux

    A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.