Cross site scripting

In JetBrains YouTrack before 2020.6.6441, stored XSS was possible via an issue attachment...

CVE-2021-27733

JetBrains YouTrack prior to version 2020.6.6441 is affected by a Stored XSS via issue attachments (CVE-2021-27733). The vulnerability impacts YouTrack components handling attachments, enabling an attacker to inject script that could execute in a user’s browser. JetBrains’ security bulletin confir...

CVE-2021-27733

In JetBrains YouTrack before 2020.6.6441, stored XSS was possible via an issue attachment...

JetBrains YouTrack 跨站脚本漏洞

YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. A stored cross-site scripting vulnerability exists in JetBrains YouTrack versions prior to 2020.6.6441. An attack...

Proofpoint Enterprise Protection Security Bypass Vulnerability

Proofpoint Enterprise Protection is a functional application from Proofpoint USA that provides email protection. A security bypass vulnerability exists in Proofpoint Enterprise Protection versions prior to 8.16.4, which can be exploited by an attacker to send an e-mail with a malicious attachment...

CVE-2020-14009

Proofpoint Enterprise Protection PPS/PoD before 8.16.4 contains a vulnerability that could allow an attacker to deliver an email message with a malicious attachment that bypasses scanning and file-blocking rules. The vulnerability exists because messages with certain crafted and malformed multipa...

CVE-2020-14009

Proofpoint Enterprise Protection PPS/PoD before 8.16.4 contains a vulnerability that could allow an attacker to deliver an email message with a malicious attachment that bypasses scanning and file-blocking rules. The vulnerability exists because messages with certain crafted and malformed multipa...

EulerOS 2.0 SP3 : evolution (EulerOS-SA-2021-1779)

According to the version of the evolution packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains...

messagelib 信息泄露漏洞

messagelib is an application program. A small C library for Linux. An information disclosure vulnerability exists in messagelib that stems from the way messagelib in KDE KMail deletes attachments to encrypted messages on remote servers e.g. IMAP servers. The following products and versions are...

DEBIAN-CVE-2021-31865

Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows users to circumvent the allowed filename extensions of uploaded attachments...

CVE-2021-31865

Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows users to circumvent the allowed filename extensions of uploaded attachments...

UBUNTU-CVE-2021-31865

Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows users to circumvent the allowed filename extensions of uploaded attachments...

DEBIAN-CVE-2020-36326

PHPMailer 6.1.8 through 6.4.0 allows object injection through Phar Deserialization via addAttachment with a UNC pathname. NOTE: this is similar to CVE-2018-19296, but arose because 6.1.8 fixed a functionality problem in which UNC pathnames were always considered unreadable by PHPMailer, even in...

Redmine 安全特征问题漏洞

Redmine is a set of open source Web-based project management and defect tracking tools . The product provides project management , issue tracking and role-based access control and other features . A security feature issue vulnerability exists in Redmine versions prior to 4.0.9, 4.1.x series...

PT-2021-12009 · Phpmailer · Phpmailer

Name of the Vulnerable Software and Affected Versions: PHPMailer versions 6.1.8 through 6.4.0 Description: The issue allows object injection through Phar Deserialization via the addAttachment method with a UNC pathname. This is a reintroduction of an earlier problem due to an unrelated bug fix in...

[SECURITY] Fedora 34 Update: clamav-0.103.2-1.fc34

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

Novel Email-Based Campaign Targets Bloomberg Clients with RATs

A new email-based campaign by an emerging threat actor aims to spread various remote access trojans RATs to a very specific group of targets who use Bloomberg’s industry-based services. Cisco Talos Intelligence researchers discovered the campaign, dubbing it and its perpetrator “Fajan,” and...

PT-2021-4565 · Redmine · Redmine

Name of the Vulnerable Software and Affected Versions: Redmine versions prior to 4.0.9 Redmine versions 4.1.x prior to 4.1.3 Redmine versions 4.2.x prior to 4.2.1 Description: The issue is related to the circumvention of allowed filename extensions for uploaded attachments, potentially allowing a...

CVE-2021-25375

Using predictable index for attachments in Samsung Email prior to version 6.1.41.0 allows remote attackers to get attachments of another emails when users open the malicious attachment...

Open redirect

Using predictable index for attachments in Samsung Email prior to version 6.1.41.0 allows remote attackers to get attachments of another emails when users open the malicious attachment...