CVE-2019-3787: UAA defaults email address to an insecure domain | Cloud Foundry

Severity High Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions UAA Release OSS All versions prior to v73.0.0 Description Cloud Foundry UAA, versions prior to 73.0.0, falls back to appending “unknown.org” to a user’s email address when one is not provided and the user...

Fedora Update for perl-Email-Address-List FEDORA-2019-73cbc02e14

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[ASA-201905-7] perl-email-address: denial of service

Arch Linux Security Advisory ASA-201905-7 ========================================= Severity: Low Date : 2019-05-06 CVE-ID : CVE-2018-12558 Package : perl-email-address Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-722 Summary ======= The package perl-email-addre...

CMS Made Simple <= 2.2.12 Multiple Reflected XSS Vulnerabilities

CMS Made Simple is prone to multiple reflected cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

openSUSE: Security Advisory for perl-Email-Address (openSUSE-SU-2019:1114-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : perl-Email-Address (openSUSE-2019-1114)

This update for perl-Email-Address to version 1.912 fixes the following issue : Security issue fixed : - CVE-2018-12558: Fixed a vulnerability which could allow Denial of Service in perl module Email::Address bsc1098368. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

OPENSUSE-SU-2019:1114-1 Security update for perl-Email-Address

This update for perl-Email-Address to version 1.912 fixes the following issue: Security issue fixed: - CVE-2018-12558: Fixed a vulnerability which could allow Denial of Service in perl module Email::Address bsc1098368...

Security update for perl-Email-Address (important)

openSUSE Security Update: Security update for perl-Email-Address Announcement ID: openSUSE-SU-2019:1114-1 Rating: important References: 1098368 Cross-References: CVE-2018-12558 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 An update that fixes one vulnerabilit...

CVE-2019-10107

CMS Made Simple 2.2.10 has XSS via the myaccount.php "Email Address" field, which is reachable via the "My Preferences - My Account" section...

CVE-2019-10107

CMS Made Simple 2.2.10 has XSS via the myaccount.php "Email Address" field, which is reachable via the "My Preferences - My Account" section...

CVE-2019-10107

CMS Made Simple version 2.2.10 contains a Cross‑Site Scripting (XSS) vulnerability in the myaccount.php “Email Address” field, reachable through My Preferences → My Account. The issue is documented across multiple sources (e.g., NVD CVE-2019-10107 and Red Hat/CNVD entries) as an XSS in CMSMS 2.2....

CVE-2019-10107

CMS Made Simple 2.2.10 has XSS via the myaccount.php "Email Address" field, which is reachable via the "My Preferences - My Account" section...

CVE-2018-18898

The email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of service by remote attackers via an algorithmic complexity attack on email address parsing...

CVE-2018-18898

The email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of service by remote attackers via an algorithmic complexity attack on email address parsing...

CVE-2018-18898

The email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of service by remote attackers via an algorithmic complexity attack on email address parsing...

CVE-2018-18898

The email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of service by remote attackers via an algorithmic complexity attack on email address parsing...

CVE-2019-3775

The CVE-2019-3775 entry concerns Cloud Foundry UAA prior to v70.0, where an authenticated user can modify their own email address, enabling impersonation of another user. The vulnerability is described as an authorization issue in multiple sources (CNVD/CVE records) and Cloud Foundry’s own adviso...

CVE-2019-3775

Cloud Foundry UAA, versions prior to v70.0, allows a user to update their own email address. A remote authenticated user can impersonate a different user by changing their email address to that of a different user...

CVE-2019-3775: UAA allows users to modify their own email address | Cloud Foundry

Severity High Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions UAA release: all versions prior to v70.0 Description Cloud Foundry UAA, versions prior to v70.0, allows a user to update their own email address. A remote authenticated user can impersonate a different user...

JetBrains Security Bulletin Q4 2018

News Security JetBrains Security Bulletin Q4 2018 Robert Demmer We have resolved a series of security issues in our products in the fourth quarter of 2018. Here’s a report summary with descriptions of each issue and the version in which they were resolved. Product | Description | Severity |...