EUVD-2018-1495

Malware in sbrugna...

EUVD-2018-1490

Malware in sbrugna...

CVE-2018-0687

Cross-site scripting vulnerability in Denbun by NEOJAPAN Inc. Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0681

Denbun by NEOJAPAN Inc. Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier uses hard-coded credentials, which may allow remote attackers to login to the Management page and change the configuration...

CVE-2018-0685

SQL injection vulnerability in the Denbun POP version V3.3P R4.0 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via HTTP requests for mail search...

CVE-2018-0685

SQL injection vulnerability in the Denbun POP version V3.3P R4.0 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via HTTP requests for mail search...

Sql injection

SQL injection vulnerability in the Denbun POP version V3.3P R4.0 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via HTTP requests for mail search...

CVE-2018-0685

SQL injection vulnerability in the Denbun POP version V3.3P R4.0 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via HTTP requests for mail search...

CVE-2018-0685

CVE-2018-0685 is a SQL injection vulnerability in Denbun POP (and IMAP in related records) prior to fixed versions. The issue allows a remote authenticated attacker to execute arbitrary SQL commands via HTTP requests for mail search, affecting Denbun POP versions V3.3P R4.0 and earlier. Underlyin...

PT-2018-9011

Name of the Vulnerable Software and Affected Versions Denbun POP versions V3.3P R4.0 and earlier Denbun IMAP versions V3.3I R4.0 and earlier Description A buffer overflow issue allows remote attackers to execute arbitrary code or cause a denial-of-service DoS condition via Cookie data...

CVE-2018-0685: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Denbun POP version V3.3P R4.0 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via HTTP requests for mail search...

PT-2018-9012

Name of the Vulnerable Software and Affected Versions Denbun POP versions V3.3P R3.0 and earlier Denbun IMAP versions V3.3I R3.0 and earlier Description A buffer overflow issue allows remote attackers to execute arbitrary code or cause a denial-of-service DoS condition via multipart/form-data...

PT-2018-9013

Name of the Vulnerable Software and Affected Versions Denbun POP version V3.3P R4.0 and earlier Description The issue allows remote authenticated attackers to execute arbitrary SQL commands via HTTP requests for mail search. This can be achieved by exploiting a SQL injection vulnerability...

PT-2018-9015

Name of the Vulnerable Software and Affected Versions Denbun POP version V3.3P R4.0 and earlier Denbun IMAP version V3.3I R4.0 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For Denbun PO...

JVN#00344155: Multiple vulnerabilities in Denbun

Denbun provided by NEOJAPAN Inc. is a WebMail System. Denbun contains multiple vulnerabilities listed below. Hard-coded credentials for user account CWE-798 - CVE-2018-0680 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H| Base Score: 9.8 CVSS v2|...