CVE-2019-20634

An issue was discovered in Proofpoint Email Protection through 2019-09-08. By collecting scores from Proofpoint email headers, it is possible to build a copy-cat Machine Learning Classification model and extract insights from this model. The insights gathered allow an attacker to craft emails that receive preferable scores, with a goal of delivering malicious emails.

• CWE-697

• https://github.com/moohax/Proof-PuddingThird Party Advisory
• https://github.com/moohax/Talks/blob/master/slides/DerbyCon19.pdfThird Party Advisory
• https://www.proofpoint.com/us/security/CVE-2019-20634Vendor Advisory
• https://www.proofpoint.com/us/security/security-advisories/pfpt-sn-2020-0001Vendor Advisory
• https://atlas.mitre.org/studies/AML.CS0008
• https://github.com/moohax/Proof-PuddingThird Party Advisory
• https://github.com/moohax/Talks/blob/master/slides/DerbyCon19.pdfThird Party Advisory
• https://www.proofpoint.com/us/security/CVE-2019-20634Vendor Advisory
• https://www.proofpoint.com/us/security/security-advisories/pfpt-sn-2020-0001Vendor Advisory

Published

Mar 30, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-20629An issue was discovered in libgpac.a in GPAC before 0.8.0, a…5.5
• CVE-2019-2063In libxaac, there is a possible out of bounds write due to a…8.8
• CVE-2019-20630An issue was discovered in libgpac.a in GPAC before 0.8.0, a…5.5
• CVE-2019-20631An issue was discovered in libgpac.a in GPAC before 0.8.0, a…5.5
• CVE-2019-20632An issue was discovered in libgpac.a in GPAC before 0.8.0, a…5.5
• CVE-2019-20633GNU patch through 2.7.6 contains a free(p_line[p_end]) Doubl…5.5
• CVE-2019-20635codeBeamer before 9.5.0-RC3 does not properly restrict the a…6.1
• CVE-2019-20636In the Linux kernel before 5.4.12, drivers/input/input.c has…6.7
• CVE-2019-20637An issue was discovered in Varnish Cache before 6.0.5 LTS, 6…7.5
• CVE-2019-20638NETGEAR MR1100 devices before 12.06.08.00 are affected by di…6.5
• CVE-2019-20639Certain NETGEAR devices are affected by stored XSS. This aff…4.8
• CVE-2019-2064In libxaac, there is a possible out of bounds write due to a…8.8