Design/Logic Flaw

Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly implement a cryptographic protection mechanism, which allows remote attackers to read message attachments via vectors related to duplicate messages...

CVE-2016-1788

Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly implement a cryptographic protection mechanism, which allows remote attackers to read message attachments via vectors related to duplicate messages...

PT-2017-8926 · Inverse +1 · Sogo +1

Name of the Vulnerable Software and Affected Versions: SOGo version 2.3.7 Description: A memory leak issue allows remote attackers to cause a denial of service by consuming memory via a large number of attempts to upload a large attachment, related to temporary files. Recommendations: For SOGo...

Threat Outbreak Alert RuleID21263: Email Messages Distributing Malicious Software on March 9, 2016

Medium Alert ID: 43711 First Published: 2016 February 24 13:38 GMT Last Updated: 2016 March 9 20:46 GMT Version: 4 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21263 an...

WordPress Zip Attachments Plugin 'download.php' Directory Traversal Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

Threat Outbreak Alert RuleID20460: Email Messages Distributing Malicious Software on January 15, 2016

Medium Alert ID: 43043 First Published: 2016 January 15 20:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20460 may contain the following files: Name |...

WordPress Zip Attachments Plugin Directory Traversal Vulnerability

WordPress is the WordPress Software Foundation of a set of PHP language development of the blogging platform, the platform supports in PHP and MySQL server set up a personal blog site. Zip Attachments is one of the plug-ins used to add in the post or page to download download before the file is...

CVE-2015-4694

Directory traversal vulnerability in download.php in the Zip Attachments plugin before 1.5.1 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the zafile parameter...

Directory traversal

Directory traversal vulnerability in download.php in the Zip Attachments plugin before 1.5.1 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the zafile parameter...

Threat Outbreak Alert RuleID20375: Email Messages Distributing Malicious Software on January 8, 2016

Medium Alert ID: 42958 First Published: 2016 January 8 20:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20375 may contain the following files: Name |...

CVE-2015-4694

Directory traversal vulnerability in download.php in the Zip Attachments plugin before 1.5.1 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the zafile parameter...

CVE-2015-4694

CVE-2015-4694 affects the WordPress Zip Attachments plugin (versions before 1.5.1). A directory traversal flaw in download.php (za_file parameter) allows an attacker to read arbitrary files. Public references describe this as an arbitrary file retrieval/vulnerability in the plugin. Remediation: u...

libreport: Possible private data leak in Bugzilla bugs opened by ABRT

It was found that ABRT may have exposed non-public information to Red Hat Bugzilla during crash reporting. A bug in the libreport library caused changes made by a user in files included in a crash report to be discarded. As a result, Red Hat Bugzilla attachments may contain data that was not...

libreport: Possible private data leak in Bugzilla bugs opened by ABRT

It was found that ABRT may have exposed non-public information to Red Hat Bugzilla during crash reporting. A bug in the libreport library caused changes made by a user in files included in a crash report to be discarded. As a result, Red Hat Bugzilla attachments may contain data that was not...

Threat Outbreak Alert RuleID19516: Email Messages Distributing Malicious Software on November 20, 2015

Medium Alert ID: 42195 First Published: 2015 November 20 15:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19516 may contain the following files: Name |...

Threat Outbreak Alert RuleID4961: Email Messages Distributing Malicious Software on July 6, 2016

Medium Alert ID: 41886 First Published: 2015 November 2 13:41 GMT Last Updated: 2016 July 6 19:09 GMT Version: 50 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID4961 and...

Threat Outbreak Alert RuleID19081: Email Messages Distributing Malicious Software on October 30, 2015

Medium Alert ID: 41816 First Published: 2015 October 30 14:38 GMT Last Updated: 2015 November 2 13:20 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19081...

CVE-2005-1753

ReadMessage.jsp in JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to view other users' e-mail attachments via a direct request to /mailboxesdir/username@domainname. NOTE: Sun and Apache dispute this issue. Sun states: "The report makes references to sourc...

The vulnerability of the Mac OS X operating system, which allows a perpetrator to gain access to protected information

The vulnerability of the Mail Drop extension of the Mail component in the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain access to protected information by analyzing network traffic at the time of sendin...

Threat Outbreak Alert RuleID18835: Email Messages Distributing Malicious Software on November 17, 2015

Medium Alert ID: 41616 First Published: 2015 October 20 20:23 GMT Last Updated: 2015 November 18 14:00 GMT Version: 10 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID1883...