35967 matches found
CVE-2015-9277
creationtimestamp| type| source ---|---|--- 2019-01-16 18:57:21+00:00| seen| https://t.me/cibsecurity/2072...
CVE-2015-9278
creationtimestamp| type| source ---|---|--- 2019-01-16 18:57:20+00:00| seen| https://t.me/cibsecurity/2071...
CVE-2015-9279
creationtimestamp| type| source ---|---|--- 2019-01-16 18:57:19+00:00| seen| https://t.me/cibsecurity/2070...
CVE-2015-9280
creationtimestamp| type| source ---|---|--- 2019-01-16 18:57:18+00:00| seen| https://t.me/cibsecurity/2069...
CVE-2015-9279
CVE-2015-9279 affects MailEnable prior to version 8.60. The issue is a Stored XSS via malformed HTML in email bodies where a tag like "" character, enabling script execution. Affected component is MailEnable’s mail server rendering/processing of email content (stored XSS). Impact described in sou...
CVE-2015-9277
MailEnable before 8.60 is affected by a directory traversal due to mishandling of /../ and /.. / sequences, allowing an attacker to read other users’ messages and potentially upload and delete files. Affected product: MailEnable (before 8.60). Root cause: improper normalization of path traversal ...
CVE-2015-9278
MailEnable before 8.60 allows Privilege Escalation because admin accounts could be created as a consequence of %0A mishandling in AUTH.TAB after a password-change request...
CVE-2015-9276
SmarterMail (SmarterTools) before version 13.3.5535 is affected by a stored XSS vulnerability where attacker-controlled HTML/JS in an email bypasses anti-XSS protections. When a victim opens or replies to the attacker’s email, JS executes; passwords could be reset on the password-reset page that ...
CVE-2015-9278
Summary: MailEnable before 8.60 is vulnerable to privilege escalation due to incorrect handling of the %0A sequence in AUTH.TAB after a password-change request, enabling an attacker to create or modify admin-like accounts. Affected product/versions: MailEnable prior to 8.60. Root cause: mishandli...
CVE-2015-9280
MailEnable before 8.60 is vulnerable to an XML External Entity (XXE) attack via an XML document in the request.aspx Options parameter, per CVE-2015-9280. The vulnerability affects MailEnable's handling of XML in that parameter and can lead to high-severity impact, with CVSSv3.1 base score 10.0 (C...
CVE-2015-8612
creationtimestamp| type| source ---|---|--- 2019-01-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46186 2019-02-01 21:29:24+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/bluemansetdhcphandlerdbusprivesc.rb 2025-02-06...
MariaDB 5.5.0 < 5.5.42 Multiple Vulnerabilities
The version of MariaDB installed on the remote host is prior to 5.5.42. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.5.42 advisory. - Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to...
Denial Of Service (DoS)
RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable implementation of an AMQP broker. Security Fixes: A resource-consumption flaw was found in RabbitMQ Server, where the lengthsage or lengthsincr...
Arbitrary Code Execution
firefox is vulnerable to arbitrary code execution attacks. The vulnerability exists as Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via...
KLA11402 Spoofing vulnerability in Microsoft Office
Spoofing vulnerability was found in Microsoft Office. Malicious users can exploit this vulnerability remotely via specially crafted request to spoof user interface. Original advisories CVE-2019-0624 Related products Microsoft-Lync Microsoft-Office CVE list CVE-2019-0624 warning KB list 3061064...
PHP 5.6.x < 5.6.10 Multiple Vulnerabilities
According to its banner, the version of PHP 5.6.x running on the remote web server is prior to 5.6.10. It is, therefore, affected by multiple vulnerabilities : - Multiple heap buffer overflow conditions exist in the bundled Perl-Compatible Regular Expression PCRE library due to improper validatio...
PHP 5.6.x < 5.6.6 Multiple Vulnerabilities (GHOST)
According to its banner, the version of PHP 5.6.x installed on the remote host is prior to 5.6.6. It is, therefore, affected by multiple vulnerabilities : - A heap-based buffer overflow flaw in the GNU C Library glibc due to improperly validating user-supplied input in the glibc functions...
CVE-2015-9275
creationtimestamp| type| source ---|---|--- 2019-01-08 00:23:39+00:00| seen| https://t.me/cibsecurity/1905...
SSL / TLS Certificate Known Hard Coded Private Keys
The remote host is running a service that is using a publicly known SSL / TLS private key. An attacker may use this key to decrypt intercepted traffic between users and the device. A remote attacker can also perform a man-in-the-middle attack in order to gain access to the system or modify data i...
