94 matches found
CVE-2023-48380 Softnext Mail SQR Expert - Command Injection
Softnext Mail SQR Expert is an email management platform, it has insufficient filtering for a special character within a spcific function. A remote attacker authenticated as a localhost can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command,...
CVE-2023-48379
CVE-2023-48379 affects Softnext Mail SQR Expert. The vulnerability arises from inadequate filtering of a specific URL parameter within a specific function, enabling an unauthenticated remote attacker to perform a Blind SSRF and infer internal network topology from URL error responses. Reported ac...
HCL Technologies HCL BigFix Platform 跨站脚本漏洞
HCL Technologies HCL BigFix Platform is a suite of endpoint security management platform from HCL Technologies, India. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL Technologies HCL BigFix Platform version...
5 ways to spring clean your security
It is now officailly spring in the Northern Hemisphere, and with spring and the longer days comes the inescapable urge to shake off the lethargy of Winter and embrace the need to go through your stuff, throw a bunch of it out, and give the rest of it a shiny new lustre. And in our increasingly...
GNU Mailman Cross-Site Scripting Vulnerability (CNVD-2021-88206)
GNU Mailman is a free suite of software from the GNU community for managing e-mail discussions and e-mail lists. The software can be integrated with Web projects to make it easy for users to manage email subscription accounts and provides built-in archiving, automatic forwarding processing, conte...
CVE-2019-0368
SAP Customer Relationship Management Email Management, versions: S4CRM before 1.0 and 2.0, BBPCRM before 7.0, 7.01, 7.02, 7.12, 7.13 and 7.14, does not sufficiently encode user-controlled inputs within the mail client resulting in Cross-Site Scripting vulnerability...
CVE-2019-0368
SAP Customer Relationship Management Email Management, versions: S4CRM before 1.0 and 2.0, BBPCRM before 7.0, 7.01, 7.02, 7.12, 7.13 and 7.14, does not sufficiently encode user-controlled inputs within the mail client resulting in Cross-Site Scripting vulnerability...
Cross site scripting
SAP Customer Relationship Management Email Management, versions: S4CRM before 1.0 and 2.0, BBPCRM before 7.0, 7.01, 7.02, 7.12, 7.13 and 7.14, does not sufficiently encode user-controlled inputs within the mail client resulting in Cross-Site Scripting vulnerability...
CVE-2019-0368
The CVE-2019-0368 entry concerns SAP Customer Relationship Management (CRM) Email Management. Affected products/versions include SAP S4CRM before 1.0 and 2.0, and BBPCRM before 7.0, 7.01, 7.02, 7.12, 7.13, and 7.14. The root cause is insufficient encoding of user-controlled inputs within the mail...
CVE-2019-0368
SAP Customer Relationship Management Email Management, versions: S4CRM before 1.0 and 2.0, BBPCRM before 7.0, 7.01, 7.02, 7.12, 7.13 and 7.14, does not sufficiently encode user-controlled inputs within the mail client resulting in Cross-Site Scripting vulnerability...
PT-2019-4303
Name of the Vulnerable Software and Affected Versions SAP Customer Relationship Management versions prior to 1.0 and 2.0 SAP Customer Relationship Management Email Management versions prior to 7.0, excluding 7.0, 7.01, 7.02, 7.12, 7.13, and 7.14 Description The issue is related to the lack of inp...
CVE-2019-0368: Improper Neutralization of Input During Web Page Generation
SAP Customer Relationship Management Email Management, versions: S4CRM before 1.0 and 2.0, BBPCRM before 7.0, 7.01, 7.02, 7.12, 7.13 and 7.14, does not sufficiently encode user-controlled inputs within the mail client resulting in Cross-Site Scripting vulnerability...
[SECURITY] Fedora 28 Update: mailman-2.1.26-4.fc28
Mailman is software to help manage email discussion lists, much like Majordomo and Smartmail. Unlike most similar products, Mailman gives each mailing list a webpage, and allows users to subscribe, unsubscribe, etc. over the Web. Even the list manager can administer his or her list entirely from...
Threat Outbreak Alert RuleID29692: Email Messages Distributing Malicious Software on July 6, 2017
Medium Alert ID: 54424 First Published: 2017 July 6 17:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29692 may contain the following files: Name | Size...
The value of a million dollars of vulnerability can be read Uber's internal mail-vulnerability warning-the black bar safety net
! Overview It is understood, Uber site system and broke a vulnerability, an attacker or exploit the vulnerability feel free to read Uber's internal mail. And according to Uber, the company's vulnerability reward program, the vulnerability of the value of about one million dollars. Write in front ...
Moderate: Red Hat Security Advisory: mailman security and bug fix update
Updated mailman packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...
Moderate: Red Hat Security Advisory: mailman security and bug fix update
Updated mailman packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...
Design/Logic Flaw
EMC SourceOne Email Management before 7.2 does not have a lockout mechanism for invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force attack...