EUVD-2022-32672

Malicious code in bioql PyPI...

CVE-2022-28218

An issue was discovered in CipherMail Webmail Messenger 1.1.1 through 4.1.4. A local attacker could access secret keys found in a Roundcube configuration file that are used to protect Webmail user passwords and two-factor authentication 2FA...

CVE-2022-28218

An issue was discovered in CipherMail Webmail Messenger 1.1.1 through 4.1.4. A local attacker could access secret keys found in a Roundcube configuration file that are used to protect Webmail user passwords and two-factor authentication 2FA...

CVE-2022-28218: Incorrect Default Permissions

An issue was discovered in CipherMail Webmail Messenger 1.1.1 through 4.1.4. A local attacker could access secret keys found in a Roundcube configuration file that are used to protect Webmail user passwords and two-factor authentication 2FA...

PT-2022-18883

Name of the Vulnerable Software and Affected Versions CipherMail Webmail Messenger versions 1.1.1 through 4.1.4 Description An issue was discovered that allows a local attacker to access secret keys found in a Roundcube configuration file. These keys are used to protect Webmail user passwords and...

CVE-2020-12713: Improper Privilege Management

An issue was discovered in CipherMail Community Gateway and Professional/Enterprise Gateway 1.0.1 through 4.7.1-0 and CipherMail Webmail Messenger 1.1.1 through 3.1.1-0. Attackers with administrative access to the web interface have multiple options to escalate their privileges to the Unix root...

PT-2020-13222

Name of the Vulnerable Software and Affected Versions CipherMail Community Gateway and Professional/Enterprise Gateway versions 1.0.1 through 4.7.1-0 CipherMail Webmail Messenger versions 1.1.1 through 3.1.1-0 Description An issue was discovered that allows attackers with administrative access to...