KLA11335 Multiple vulnerabilities in Microsoft Exchange Server

Multiple serious vulnerabilities were found in Microsoft Exchange. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Exchange can be exploited remotely vi...

Microsoft Exchange Server Memory Corruption Vulnerability

Microsoft Exchange Server is a set of e-mail service programs from Microsoft, which provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A memory corruption vulnerability exists in Microsoft Exchange Server that stems from the program failing to properly handle...

Microsoft Exchange Server Information Disclosure Vulnerability (CNVD-2018-10741)

Microsoft Exchange Server is a set of e-mail service programs from Microsoft, which provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An information disclosure vulnerability exists in Microsoft Exchange Server that stems from Exchange failing to properly...

Buffer overflow

The ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a lack of input validation checking mechanisms during certain mail...

AZL-7332 CVE-2017-16844 affecting package procmail for versions less than 3.22-53

Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than...

DEBIAN-CVE-2017-15612

mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline such as in java\nscript: or a crafted email address, related to the escape and autolink functions...

The vulnerability of the Microsoft Outlook email client, which allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Outlook email client arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through specially crafted email messages from a remote location...

CVE-2017-0110

Cross-site scripting XSS vulnerability in Microsoft Exchange Outlook Web Access OWA allows remote attackers to inject arbitrary web script or HTML via a crafted email or chat client, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability."...

Roundcube Remote Code Execution Vulnerability (CNVD-2016-12559)

RoundCube Webmail is a widely used open source mail system. A remote code execution vulnerability exists in Roundcube version 1.2.2, which can be exploited by an attacker to construct emails to be sent to the server side, allowing remote code execution...

Opera Mail Arbitrary Code Execution Vulnerability

Opera Mail is an email client developed by Opera Norway that supports tabbed browsing, email sessions, filters and more. An arbitrary code execution vulnerability exists in versions of Opera Mail prior to 2016-02-16 for Windows-based platforms. A remote attacker can exploit the vulnerability to...

Microsoft Exchange Information Disclosure Vulnerability

Microsoft Exchange Server is a set of e-mail service programs from Microsoft, which provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An information disclosure vulnerability exists in Microsoft Exchange Server. The vulnerability allows remote attackers to...

The vulnerability of the McAfee Email Gateway software allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of the McAfee Email Gateway security software exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code through a specially crafted email message...

Microsoft Office RCE Vulnerability

Microsoft Outlook is an e-mail client software bundled with the Office suite from Microsoft USA. The software manages e-mail, contacts, calendars, and more. A security vulnerability exists in Microsoft Outlook, which arises from a failure of the program to properly handle specially designed e-mai...

The vulnerability of the Microsoft Exchange Server system’s automation mechanism allows a hacker to inject arbitrary web or HTML code.

The vulnerability of the Outlook Web Access component of the Microsoft Exchange Server automation system exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code through a special...

Novell GroupWise Client IMG Tag SRC Parameter Buffer Overflow - High Confidence (CVE-2007-6435)

Novell GroupWise is a client-server collaborative software and email system provided by Novell. The Novell GroupWise Client application is capable of communicating with Novell Group server, as well as Internet email gateways using SMTP, POP, and IMAP protocols. A buffer overflow vulnerability has...

Novell GroupWise Client IMG Tag SRC Parameter Buffer Overflow (CVE-2007-6435)

Novell GroupWise is a client-server collaborative software and email system provided by Novell. The Novell GroupWise Client application is capable of communicating with Novell Group server, as well as Internet email gateways using SMTP, POP, and IMAP protocols. A buffer overflow vulnerability has...

Ipswitch Imail Server - List Mailer Reply-To Address Memory Corruption

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | To: To Person """ ReplayCount = 5 while ReplayCount0: message = message + "Reply-To:" counter = 3 while counter0: if counter != 50000 : message = message + "," message = message + "Reply-To: " message = message +...

Gmail Checker Plus Chrome Extension Cross Site Scripting / Cross Site Request Forgery

Gmail Checker plus Chrome extension XSS/CSRF II extension: https://chrome.google.com/extensions/detail/gffjhibehnempbkeheiccaincokdjbfe advisore:http://lostmon.blogspot.com/2010/06/gmail-checker-plus-chrome-extension.html Exploit available:yes vendor notify: NO So in this case "Google Mail Checke...

DEBIAN-CVE-2006-0321

fetchmail 6.3.0 and other versions before 6.3.2 allows remote attackers to cause a denial of service crash via crafted e-mail messages that cause a free of an invalid pointer when fetchmail bounces the message to the originator or local postmaster...

XSS vulnerability in Sqwebmail 4.0.4

Hello Bugtraq, Sqwebmail http://www.inter7.com/sqwebmail/ is a web cgi client for sending and receiving email using Maildir mailboxes. During a web application security evaluation on Sqwebmail 4.0.4.20040524 we have found a XSS Cross Site Scripting vulnerability inside the printheaderuc function...