6719 matches found
Scientific Linux Security Update : mailman on SL6.x i386/x86_64 (20150722)
It was found that mailman did not sanitize the list name before passing it to certain MTAs. A local attacker could use this flaw to execute arbitrary code as the user running mailman. CVE-2015-2775 It was found that mailman stored private email messages in a world- readable directory. A local use...
KMail Attachment Encryption Information Disclosure Vulnerability
Kontact is a software suite of personal information managers and components.KMail is one of the e-mail components. KMail handles attachments that are not properly encrypted, allowing remote attackers to exploit this vulnerability to obtain sensitive information...
Fedora 22 : roundcubemail-1.1.2-1.fc22 (2015-11405)
Release 1.1.2 - Add new plugin hook 'identitycreateafter' providing the ID of the inserted identity 1490358 - Add option to place signature at bottom of the quoted text even in top-posting mode sigbelow - Fix handling of %-encoded entities in mailto: URLs 1490346 - Fix zipped messages downloads...
Threat Outbreak Alert RuleID16858: Email Messages Distributing Malicious Software on August 17, 2015
Medium Alert ID: 40102 First Published: 2015 July 23 19:14 GMT Last Updated: 2015 August 17 13:15 GMT Version: 7 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16858,...
IBM Lotus Notes Attachment Viewer UUE File Handling Buffer Overflow - ver 2 (CVE-2005-2618)
Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communicating with email servers over the SMTP, POP and IMAP protocols. There exists a buffer overflow vulnerability in IBM Lotus Notes Attachment Viewer...
CVE-2015-5590
Stack-based buffer overflow in the pharfixfilepath function in ext/phar/phar.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value, as demonstrated by mishandling...
WordPress WP Attachment Export 0.2.3 Arbitrary File Download Vulnerability
Exploit for php platform in category web applications Title: Arbitrary File Download in WP Attachment Export Wordpress Plugin v0.2.3 Submitter: Nitin Venkatesh Product: WP Attachment Export Wordpress Plugin Product URL: https://wordpress.org/plugins/wp-attachment-export/ Vulnerability Type:...
WordPress Attachment Export Plugin <= 0.2.3 - Unauthenticated File Download
Because of this vulnerability, an unauthenticated user can download the XML data that holds all the details of attachments/posts on a Wordpress powered site. Solution Update the plugin...
WP Attachment Export <= 0.2.3 - Unauthenticated File Download
The WP Attachment Export WordPress plugin was affected by an Unauthenticated File Download security vulnerability...
WordPress WP Attachment Export 0.2.3 Arbitrary File Download
Title: Arbitrary File Download in WP Attachment Export Wordpress Plugin v0.2.3 Submitter: Nitin Venkatesh Product: WP Attachment Export Wordpress Plugin Product URL: https://wordpress.org/plugins/wp-attachment-export/ Vulnerability Type: Arbitrary File Download Affected Versions: v0.2.3 Tested...
Hacking Team Flash New 0Day exploit code analysis-vulnerability warning-the black bar safety net
The weekend early in the morning, you see the know Chong Yu on the microblogging said, the Hacking Team and leaked to the new Flash 0Day in the current measured. Thus the author download a copy of the exploit code, tested indeed in the latest version available, currently the official Adobe did no...
Threat Outbreak Alert RuleID16486: Email Messages Distributing Malicious Software on July 7, 2015
Medium Alert ID: 39779 First Published: 2015 July 8 17:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16486 may contain the following files: Name | Size...
Threat Outbreak Alert RuleID16448: Email Messages Distributing Malicious Software on July 8, 2015
Medium Alert ID: 39674 First Published: 2015 July 7 19:20 GMT Last Updated: 2015 July 9 13:38 GMT Version: 3 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16448KVR may...
As a Confluence Administrator, I would like to configure the 'Attachment Download Security Policy' on a per space basis
panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-38125. panel h3. Problem Definition As a Confluence Administrator, I would like to configure the 'Attachment Download Security...
As a Confluence Administrator, I would like to configure the 'Attachment Download Security Policy' on a per space basis
h3. Problem Definition As a Confluence Administrator, I would like to configure the 'Attachment Download Security Policy' on a per space basis. At the moment, the setting is applied at a global basis, which does not work if you want attachments to be downloaded/displayed inline depending on the...
As a Confluence Administrator, I would like to configure the 'Attachment Download Security Policy' on a per space basis
panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-38125. panel h3. Problem Definition As a Confluence Administrator, I would like to configure the 'Attachment Download Security...
Threat Outbreak Alert RuleID16292: Email Messages Distributing Malicious Software on June 29, 2015
Medium Alert ID: 39574 First Published: 2015 June 30 13:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16292 may contain the following files: Name | Siz...
Threat Outbreak Alert RuleID16129: Email Messages Distributing Malicious Software on June 23, 2015
Medium Alert ID: 39480 First Published: 2015 June 23 13:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16129 may contain the following files: Name | Siz...