CWE-142

Improper Neutralization of Value Delimiters

2 CVEs Avg CVSS 6.1 MITRE
0
CRITICAL
0
HIGH
2
MEDIUM
0
LOW
0
POC
0
KEV

Monthly

CVE-2025-61962 MEDIUM PATCH This Month

In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context.

Denial Of Service Redhat Suse
NVD
CVSS 3.1
5.9
EPSS
0.0%
CVE-2025-1774 MEDIUM This Month

Incorrect string encoding vulnerability in NASK - PIB BotSense allows injection of an additional field separator character or value in the content of some fields of the generated event. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Code Injection
NVD
CVSS 4.0
6.3
EPSS
0.2%
CVE-2025-61962
EPSS 0% CVSS 5.9
MEDIUM PATCH This Month

In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context.

Denial Of Service Redhat Suse
NVD
CVE-2025-1774
EPSS 0% CVSS 6.3
MEDIUM This Month

Incorrect string encoding vulnerability in NASK - PIB BotSense allows injection of an additional field separator character or value in the content of some fields of the generated event. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Code Injection
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy