CVE-2017-18653

CVE-2017-18653 affects Samsung mobile devices running KK (4.4), L (5.0/5.1), M (6.0), and N (7.x). The Email application is vulnerable to an attack via a broadcasted intent that allows an attacker to send emails on behalf of any user. The issue is identified by Samsung as SVE-2017-9357 (Sept 2017...

CVE-2017-18653: Undefined Security Weakness

An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, M6.0, and N7.x software. The Email application allows attackers to send emails on behalf of any user via a broadcasted intent. The Samsung ID is SVE-2017-9357 September 2017...

PT-2020-8202

Name of the Vulnerable Software and Affected Versions: Samsung mobile devices with Android versions 4.4 through 7.x Description: An issue in the Email application on Samsung mobile devices allows attackers to send emails on behalf of any user via a broadcasted intent. Recommendations: For Android...

Unspecified Vulnerability in Cybozu Garoon E-mail

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An unspecified vulnerability exists in the E-mail application in Cybozu Garoon versions 4.0.0 through 4.10.2. No...

Multiple vulnerabilities in Cybozu Office

Overview Cybozu Office provided by Cybozu, Inc. contains multiple vulnerabilities listed below. Information disclosure in the application "Message" when viewing an external image CWE-200 - CVE-2018-0526 Stored cross-site scripting in "E-mail Details Screen" of the application "E-mail" CWE-79 -...

CVE-2017-13294

A information disclosure vulnerability in the Android framework aosp email application. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71814449...

CVE-2017-13294

A information disclosure vulnerability in the Android framework aosp email application. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71814449...

CVE-2017-13294

A information disclosure vulnerability in the Android framework aosp email application. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71814449...

CVE-2017-13294

A information disclosure vulnerability in the Android framework aosp email application. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71814449...

PT-2018-5572

Name of the Vulnerable Software and Affected Versions: Android versions 6.0 through 8.1 Description: A information disclosure issue exists in the Android framework, specifically affecting the AOSP email application. This issue may potentially impact a significant number of devices worldwide...

CVE-2017-13294: Exposure of Sensitive Information to an Unauthorized Actor

A information disclosure vulnerability in the Android framework aosp email application. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71814449...

Samsung Mobile Device Email Application Cross-Site Scripting Vulnerability

Samsung mobile devices are smart mobile devices released by Samsung in South Korea.Android M is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.Email application is one of the email applications. Email application is one of the email...

CVE-2018-9140

On Samsung mobile devices with M6.0 software, the Email application allows XSS via an event attribute and arbitrary file loading via a src attribute, aka SVE-2017-10747...

CVE-2018-9140

On Samsung mobile devices with M6.0 software, the Email application allows XSS via an event attribute and arbitrary file loading via a src attribute, aka SVE-2017-10747...

CVE-2018-9140

On Samsung mobile devices with M6.0 software, the Email application allows XSS via an event attribute and arbitrary file loading via a src attribute, aka SVE-2017-10747...

CVE-2018-9140: Improper Neutralization of Input During Web Page Generation

On Samsung mobile devices with M6.0 software, the Email application allows XSS via an event attribute and arbitrary file loading via a src attribute, aka SVE-2017-10747...

Directory traversal

TIT-AL00C583B211 has a directory traversal vulnerability which allows an attacker to obtain the files in email application...

CVE-2017-2695

TIT-AL00C583B211 has a directory traversal vulnerability which allows an attacker to obtain the files in email application...

CVE-2017-2695

TIT-AL00C583B211 has a directory traversal vulnerability which allows an attacker to obtain the files in email application...

CVE-2017-2695

CVE-2017-2695 affects Huawei Enjoy 5 (TIT-AL00C583B211): a directory traversal flaw that lets an attacker obtain files from the email application by tricking a user into installing a malicious app and altering a URI. The underlying issue is a URI-based directory traversal in Huawei smartphones. H...