dmarcts-report-viewer 跨站脚本漏洞

dmarcts-report-viewer is a PHP viewer for DMARC records by TechSneeze Individual Developers. A security vulnerability exists in dmarcts-report-viewer dashboard version 1.1. An attacker can exploit this vulnerability to execute arbitrary code via the orgname or domain value...

Anarchy in the UK? Not Quite: A look at the cyber health of the FTSE 350

The attack surface of the United Kingdom's 350 largest publicly traded companies has—drum roll, please—improved. But it could be better. Those are the high level findings of the latest in Rapid7's looks at the cybersecurity health of companies tied to some of the globe's largest stock indices. Th...

Fedora 36 : exim (2022-ebd5bb0478)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-ebd5bb0478 advisory. Fixed use after free in dmarcdnslookup CVE-2022-3620. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 35 : exim (2022-ebbac924d3)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-ebbac924d3 advisory. Fixed use after free in dmarcdnslookup CVE-2022-3620. Tenable has extracted the preceding description block directly from the Fedora security...

Use After Free

exim4 is vulnerable to use-after-free. The vulnerability exists in the function dmarcdnslookup of the file dmarc.c of the component DMARC Handler which allows an attacker to cause an application crash...

The vulnerability in the implementation of the dmarc_dns_lookup function (dmarc.c) of the Exim mail server’s DMARC handler allows a hacker to gain unauthorized access to protected information.

The vulnerability of the implementation of the dmarcdnslookup function dmarc.c, which is part of the DMARC email server handler from Exim, relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected informati...

DEBIAN-CVE-2022-3620

A vulnerability was found in Exim and classified as problematic. This issue affects the function dmarcdnslookup of the file dmarc.c of the component DMARC Handler. The manipulation leads to use after free. The attack may be initiated remotely. The name of the patch is...

CVE-2022-3620

A vulnerability was found in Exim and classified as problematic. This issue affects the function dmarcdnslookup of the file dmarc.c of the component DMARC Handler. The manipulation leads to use after free. The attack may be initiated remotely. The name of the patch is...

CVE-2022-3620

A vulnerability was found in Exim and classified as problematic. This issue affects the function dmarcdnslookup of the file dmarc.c of the component DMARC Handler. The manipulation leads to use after free. The attack may be initiated remotely. The name of the patch is...

Design/Logic Flaw

A vulnerability was found in Exim and classified as problematic. This issue affects the function dmarcdnslookup of the file dmarc.c of the component DMARC Handler. The manipulation leads to use after free. The attack may be initiated remotely. The name of the patch is...

CVE-2022-3620 Exim DMARC dmarc.c dmarc_dns_lookup use after free

A vulnerability was found in Exim and classified as problematic. This issue affects the function dmarcdnslookup of the file dmarc.c of the component DMARC Handler. The manipulation leads to use after free. The attack may be initiated remotely. The name of the patch is...

CVE-2022-3620

A vulnerability was found in Exim and classified as problematic. This issue affects the function dmarcdnslookup of the file dmarc.c of the component DMARC Handler. The manipulation leads to use after free. The attack may be initiated remotely. The name of the patch is...

CVE-2022-3620

CVE-2022-3620 is a vulnerability in Exim affecting the DMARC Handler’s function dmarc_dns_lookup in the file dmarc.c . The issue is described as a use-after-free vulnerability, with the attack surface being remote. The vulnerability is acknowledged in multiple advisories and Nessus plugins as fix...

CVE-2022-3620 Exim DMARC dmarc.c dmarc_dns_lookup use after free

A vulnerability was found in Exim and classified as problematic. This issue affects the function dmarcdnslookup of the file dmarc.c of the component DMARC Handler. The manipulation leads to use after free. The attack may be initiated remotely. The name of the patch is...

CVE-2022-3620 Exim DMARC dmarc.c dmarc_dns_lookup use after free

A vulnerability was found in Exim and classified as problematic. This issue affects the function dmarcdnslookup of the file dmarc.c of the component DMARC Handler. The manipulation leads to use after free. The attack may be initiated remotely. The name of the patch is...

PT-2022-5379 · Exim +1 · Exim +1

Name of the Vulnerable Software and Affected Versions: Exim affected versions not specified Description: The issue affects the function dmarc dns lookup of the file dmarc.c of the component DMARC Handler. This is related to a use after free condition, which can be exploited by a remote attacker t...

Universities Put Email Users at Cyber Risk

Top U.S. universities are among the worst in the world at protecting users from email fraud, lacking security measures to prevent common threat tactics such as domain spoofing or other types of fraudulent emails, researchers have found. Ninety-seven percent of the top 10 universities in the Unite...

GHSA-VC42-MGR2-W34R Modoboa is vulnerable to an XML External Entity Injection (XXE)

The modoboa-dmarc plugin 1.1.0 for Modoboa is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this to perform a denial of service against the DMARC reporting functionality, such as by referencing the /dev/random file within XML...

Modoboa is vulnerable to an XML External Entity Injection (XXE)

The modoboa-dmarc plugin 1.1.0 for Modoboa is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this to perform a denial of service against the DMARC reporting functionality, such as by referencing the /dev/random file within XML...

CVE-2020-36519

Mimecast Email Security before 2020-01-10 allows any admin to spoof any domain, and pass DMARC alignment via SPF. This occurs through misuse of the address rewrite feature. The domain being spoofed must be a customer in the Mimecast grid from which the spoofing occurs...