654 matches found
CVE-2026-28272
Kiteworks Email Protection Gateway (pre-9.2.0) has a stored XSS vulnerability exploitable by authenticated administrators via a configuration interface. The stored script can execute when users interact with the affected UI, potentially impacting confidentiality and integrity (C=HIGH, I=HIGH) wit...
CVE-2026-28272 Kiteworks Email Protection Gateway has a Cross-site Scripting vulnerability
Kiteworks is a private data network PDN. Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway allows authenticated administrators to inject malicious scripts through a configuration interface. The stored script executes when users interact with the affected user interface...
CVE-2026-28272 Kiteworks Email Protection Gateway has a Cross-site Scripting vulnerability
Kiteworks is a private data network PDN. Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway allows authenticated administrators to inject malicious scripts through a configuration interface. The stored script executes when users interact with the affected user interface...
EUVD-2026-9067
Kiteworks is a private data network PDN. Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway allows authenticated administrators to inject malicious scripts through a configuration interface. The stored script executes when users interact with the affected user interface...
CVE-2026-28272
Kiteworks is a private data network PDN. Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway allows authenticated administrators to inject malicious scripts through a configuration interface. The stored script executes when users interact with the affected user interface...
CVE-2026-28272: Improper Neutralization of Input During Web Page Generation
Kiteworks is a private data network PDN. Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway allows authenticated administrators to inject malicious scripts through a configuration interface. The stored script executes when users interact with the affected user interface...
PT-2026-22396
Name of the Vulnerable Software and Affected Versions Kiteworks versions prior to 9.2.0 Description Kiteworks Email Protection Gateway contains a flaw that allows authenticated administrators to inject malicious scripts through a configuration interface. These scripts execute when users interact...
Kiteworks 跨站脚本漏洞
Kiteworks is a security private network data software developed by Kiteworks Corporation in the United States. Versions of Kiteworks prior to 9.2.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from defects in the configuration interface of Email Protection Gateway,...
The vulnerability of Proxmox Mail Gateway’s security mechanism, which stems from insufficient validation of input data, allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of Proxmox Mail Gateway, a security tool for email protection, is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality and integrity of the protected information...
The vulnerability of Proxmox Mail Gateway’s security mechanism, which stems from insufficient validation of input data, allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of Proxmox Mail Gateway, a security tool for email protection, is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality and integrity of the protected information...
Filling the Most Common Gaps in Google Workspace Security
Security teams at agile, fast-growing companies often have the same mandate: secure the business without slowing it down. Most teams inherit a tech stack optimized for breakneck growth, not resilience. In these environments, the security team is the helpdesk, the compliance expert, and the incide...
The vulnerability of the FortiMail email protection system, related to the failure to implement measures to neutralize CRLF sequences, allows attackers to compromise the integrity of the protected information.
The vulnerability of the FortiMail email security system is related to the failure to take measures to neutralize CRLF sequences. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...
CVE-2025-48464
Successful exploitation of the vulnerability could allow an unauthenticated attacker to gain access to a victim’s Sync account data such as account credentials and email protection information...
CVE-2025-48464
CVE-2025-48464 describes a vulnerability in Sync that could allow an unauthenticated attacker to access a victim’s Sync account data, including account credentials and email protection information. The available documents identify the affected product as Sync and cite unauthorized access to sensi...
CVE-2025-48464 Exposure of Sensitive Information
Successful exploitation of the vulnerability could allow an unauthenticated attacker to gain access to a victim’s Sync account data such as account credentials and email protection information...
CVE-2025-48464 Exposure of Sensitive Information
Successful exploitation of the vulnerability could allow an unauthenticated attacker to gain access to a victim’s Sync account data such as account credentials and email protection information...
DuckDuckGo Browser 安全漏洞
DuckDuckGo Browser is a web browser from DuckDuckGo, Inc. A security vulnerability exists in DuckDuckGo Browser that originates from an unauthenticated attacker having access to account data, which could lead to the disclosure of credentials and email protection information...
EUVD-2021-11511
Malware in sbrugna...