CVE-2018-14503

CVE-2018-14503 is an XSS vulnerability in Coremail XT 3.0, affecting the intervalCheck.jsp page. An attacker can inject arbitrary web script/HTML via the sid parameter, enabling remote script execution in the context of the affected user. The connected documents specify the affected software (Cor...

CVE-2018-14503

Cross-site scripting XSS vulnerability in intervalCheck.jsp in Coremail XT 3.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter...

CVE-2017-14503

Summary: CVE-2017-14503 affects libarchive 3.3.2, where an out‑of‑bounds read occurs in archive_read_support_format_lha.c (lha_read_data_none) while extracting specially crafted LHA archives. The issue is connected to lha_crc16 and can lead to a crash/Denial of Service per multiple advisories. Co...