Medium: clamav

Issue Overview: A vulnerability in the email parsing module Clam AntiVirus ClamAV Software versions 0.102.0, 0.101.4 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to inefficient MIME parsing routine...

Default credentials

Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address that is equal to an existing user's email address after case transformation of Unicode characters would allow an attacker to be sent a password reset token for the matched user...

Dovecot < 2.3.9.2 DoS Vulnerability

Dovecot is prone to a denial of service vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you ca...

Dovecot Null Pointer Dereference Vulnerability

Dovecot is an open source IMAP and POP3 mail server for Linux/Unix. A null pointer dereference vulnerability exists in Dovecot versions prior to 2.3.9.2, which can be exploited by an attacker via a specially crafted email to cause the push notification driver to crash if the push notification...

ALPINE-CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

PT-2019-15927 · Dovecot +1 · Dovecot +1

Name of the Vulnerable Software and Affected Versions: Dovecot versions prior to 2.3.9.2 Description: The issue allows an attacker to crash a push-notification driver with a crafted email when push notifications are used, due to a NULL Pointer Dereference. This can be achieved by using a group...

Fedora 31 : tnef (2019-815807c020)

tnef release 1.4.18. ==================== Security release to resolve CVE-2019-18849 in which it may be possible to attack via a crafted email message extracted via tnef. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system websit...

The vulnerability of the Microsoft Exchange Server mail server, related to errors in memory object processing, allows a hacker to cause a service failure.

The vulnerability of Microsoft Exchange Server exists due to errors in memory object handling. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted email messages...

Microsoft Outlook for iOS Spoofing Vulnerability

Microsoft Outlook is a suite of e-mail applications from the American company Microsoft. A spoofing vulnerability exists in Microsoft Outlook for iOS, which can be exploited by an attacker to perform a cross-site scripting attack on an affected system by sending a specially crafted email to the...

Cisco Email Security Appliance Content Filter Bypass Vulnerability (cisco-sa-20190703-esa-filterpass)

According to its self-reported version, Cisco Email Security Appliance ESA is affected by a vulnerability in the email message scanning of Cisco AsyncOS Software due to improper input validation of certain email fields. An unauthenticated, remote attacker can exploit this vulnerability by sending...

PT-2019-3012 · Microsoft · Outlook

Name of the Vulnerable Software and Affected Versions: Microsoft Outlook affected versions not specified Description: The issue is related to errors in processing incoming messages. An attacker could exploit this to gain elevated privileges by sending a specially crafted email to a victim, which...

CVE-2019-1933

A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured filters on the device. The vulnerability is due to improper input validation of certain email fields. An attacker cou...

CVE-2019-1933 Cisco Email Security Appliance Content Filter Bypass Vulnerability

A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured filters on the device. The vulnerability is due to improper input validation of certain email fields. An attacker cou...

CVE-2019-1933 Cisco Email Security Appliance Content Filter Bypass Vulnerability

A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured filters on the device. The vulnerability is due to improper input validation of certain email fields. An attacker cou...

The vulnerability of the Microsoft Outlook for Android client, related to information representation errors in the user interface, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Microsoft Outlook for Android client is related to information representation errors in the user interface. Exploiting this vulnerability could allow a malicious actor, operating remotely, to carry out cross-site scripting attacks using a specially created email message...

Mozilla Thunderbird Stack Buffer Overflow Vulnerability

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. A buffer overflow vulnerability exists in the icalrecur.c file in Mozilla Thunderbird...

Mozilla Thunderbird Type Obfuscation Vulnerability

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. A type-obfuscation vulnerability exists in the icalproperty.c file in Mozilla Thunderbird...

Mozilla Thunderbird icalparser.c File Heap Buffer Overflow Vulnerability

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. A heap buffer overflow vulnerability exists in the icalparser.c file in Mozilla Thunderbi...