CVE-2021-20022

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host...

CVE-2021-20022

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host...

CVE-2021-20022

CVE-2021-20022 affects SonicWall Email Security versions 10.0.9.x and enables post-authenticated arbitrary file upload via the branding ZIP mechanism (Zip Slip style) to write files to the server. FireEye/Mandiant detail that lack of input validation allows an attacker to place a web shell in a w...

CVE-2021-20021

A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host...

CVE-2021-20021

A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host...

CVE-2021-20021

CVE-2021-20021 affects SonicWall Email Security. The vulnerability enables an unauthenticated attacker to create an administrative account via a crafted HTTP request to the ES appliance, by exploiting an improperly secured admin API endpoint. This leads to privilege escalation with administrator ...

SonicWall Email Security pre-authentication administrative account creation vulnerability

A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. CVE: CVE-2021-20021 Last updated: April 9, 2021, 5:12 p.m...

PT-2021-2799 · Sonicwall · Sonicwall Hosted Email Security +1

Name of the Vulnerable Software and Affected Versions: SonicWall Email Security version 10.0.9.x SonicWall Hosted Email Security affected versions not specified Description: The issue is related to insufficient file checking during upload, allowing a remote attacker to gain unauthorized access to...

Sonicwall SonicWall Email Security Appliance 安全漏洞

SonicWall Email Security is an EMAIL protection device. SonicWall Email Security has a security vulnerability that allows remote attackers to submit special requests that can create administrator accounts...

PT-2021-2800

Name of the Vulnerable Software and Affected Versions SonicWall Email Security version 10.0.9.x Description The issue is related to improper privilege management in SonicWall Email Security, allowing a remote attacker to create an administrative account by sending a crafted HTTP request. This can...

CVE-2021-20022

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host. Recent assessments: wvu-r7 at September 07, 2021 4:22am UTC reported: Super easy to exploit. See CVE-2021-20021 for the first part of the...

CVE-2021-20021

A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. Recent assessments: wvu-r7 at April 28, 2021 11:04pm UTC reported: CVE-2021-20021 is being exploited in the wild to gain...

Sonicwall SonicWall Email Security Appliance 代码问题漏洞

SonicWall Email Security is an EMAIL protection device. A security vulnerability exists in SonicWall Email Security that could be exploited by remote attackers to submit a special request to upload arbitrary files to the system...

Rapid7 Releases New Industry Cyber-Exposure Report (ICER): Fortune 500

Today, Rapid7 just released the first in our all-new Industry Cyber-Exposure Report ICER series. For those of you who have been following our research over the past few years, you may immediately suspect us of unloading another 100+ page tome of internet-based findings around the internet—but not...

[SECURITY] Fedora 32 Update: spamassassin-3.4.5-1.fc32

SpamAssassin provides you with a way to reduce if not completely eliminate Unsolicited Commercial Email SPAM from your incoming email. It can be invoked by a MDA such as sendmail or postfix, or can be called from a procmail script, .forward file, etc. It uses a genetic-algorithm evolved scoring...

[SECURITY] Fedora 34 Update: spamassassin-3.4.5-1.fc34

SpamAssassin provides you with a way to reduce if not completely eliminate Unsolicited Commercial Email SPAM from your incoming email. It can be invoked by a MDA such as sendmail or postfix, or can be called from a procmail script, .forward file, etc. It uses a genetic-algorithm evolved scoring...

CVE-2021-1629

Tableau Server (Tableau Server) is affected by CVE-2021-1629, an open redirect vulnerability arising from the server’s inability to validate certain URLs embedded in emails sent to users. This could allow an attacker to redirect a user to a malicious site via a link in a shared/view email. The is...

Office 365 Phishing Attack Targets Financial Execs

A new phishing scam is on the rise, targeting executives in the insurance and financial services industries to harvest their Microsoft 365 credentials and launch business email compromise BEC attacks, according to a new report from Area 1 Security. These new, sophisticated attacks are aimed at...

CVE-2021-22848

HGiga MailSherlock is affected by a SQL injection vulnerability. The issue arises from lack of validation of externally entered SQL statements in URL parameters of email pages, allowing remote attackers to inject SQL syntax and execute commands. Root cause: input validation failure in database-ba...

CVE-2021-20629

CVE-2021-20629 affects Cybozu Office (Web-based suite) versions 10.0.0–10.8.4. The vulnerability is a cross-site scripting flaw in the E-mail component that allows remote attackers to inject arbitrary script via unspecified vectors, potentially impacting users’ browsers when logged in. The root c...