CVE-2017-2695: Improper Limitation of a Pathname to a Restricted Directory

TIT-AL00C583B211 has a directory traversal vulnerability which allows an attacker to obtain the files in email application...

PT-2017-15482

Name of the Vulnerable Software and Affected Versions TIT-AL00C583B211 affected versions not specified Description The issue allows an attacker to obtain files in the email application due to a directory traversal vulnerability. Recommendations At the moment, there is no information about a newer...

WoMail Client for Android - Gesture Password Bypass Vulnerability

Wo Mailbox Client is an email sending and receiving application from China Unicom. A gesture password bypass vulnerability exists in the Android version of Vo Mail Client. The vulnerability allows attackers to bypass the gesture lock to send emails after using the gesture lock setting...

CVE-2 0 1 6-3 9 1 8: the e-mail information disclosure vulnerability analysis-vulnerability warning-the black bar safety net

Google recently announced a 2 0 1 6 years 1 0 months of Nexus Security Bulletin, which includes a 3 6 0 mobile Guard Alpha teamAlpha Teamto submit e-mail information disclosure Vulnerability, CVE-2 0 1 6-3 9 1 8, The Google of this vulnerability is rated high risk level. The vulnerability can lea...

PT-2016-6032

Name of the Vulnerable Software and Affected Versions Huawei PLK smartphones versions AL10C00 through AL10C00B211 Huawei PLK smartphones versions AL10C92 through AL10C92B211 Huawei ATH smartphones versions AL00C00 through AL00C00B361 Huawei ATH smartphones versions CL00C92 through CL00C92B361...

Cross-Site Scripting Vulnerability in Multiple Huawei Products

Huawei PLK PLK-AL10C00B211 is a smartphone product from Huawei, China. A cross-site scripting vulnerability exists in the Email application of multiple Huawei PLK PLK-AL10C00B211 products, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which ca...

Google Email Application for Android Denial of Service Vulnerability

Google Email Application for Android is a suite of email applications for the Android platform from Google Inc. A security vulnerability in version 4.2.2.0200 of the Google Email Application for Android application allows a remote attacker to send emails containing a specially crafted...

Google Email Application Header Parsing Denial Of Service

A vulnerability in the Google email application has been found. The vulnerability occurs when processing a malicious email message. An attacker can remotely perform a Denial Of Service attack by sending a specially crafted email...

Information disclosure

The Google Email application 4.2.2.0200 for Android allows remote attackers to cause a denial of service persistent application crash via a "Content-Disposition: ;" header in an e-mail message...

PT-2015-5361

Name of the Vulnerable Software and Affected Versions Google Email application version 4.2.2.0200 Description The issue allows remote attackers to cause a denial of service, resulting in a persistent application crash. This can be achieved by sending an e-mail message with a Content-Disposition: ...

Novell GroupWise Client 8.x < 8.0.3 Hot Patch 4 / 2012 < 2012 SP3 / 2014 < 2014 SP1 Multiple Dereference Vulnerabilities

The Novell GroupWise Client installed on the remote Windows host is version 8.x prior to 8.0.3 Hot Patch 4 8.0.3.36955, version 2012 prior to 2012 SP3 12.0.3.26810, or version 2014 prior to 2014 SP1 14.0.1.27118. It is, therefore, affected by multiple untrusted pointer dereference vulnerabilities...

Mozilla Thunderbird vulnerability allows hackers to Insert malicious code into Emails

Do you use Thunderbird, a free; open-source; cross-platform application for managing email and news feeds? According to a Pakistani Security Researcher from Vulnerability-Lab, a flaw gives an attacker the ability to run code on a user’s machine. Mozilla Thunderbird 17.0.6 email application is...

Mozilla Thunderbird 17.0.6 - Input Validation Filter Bypass

Document Title: =============== Mozilla Bug Bounty 5 - WireTap Remote Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=953 Mozilla Bug Tracking ID: 875818 Video: http://www.vulnerability-lab.com/getcontent.php?id=1182 Partner News...

Mozilla Thunderbird 17.0.6 - Input Validation Filter Bypass

Mozilla Thunderbird 17.0.6 - Input Validation Filter Bypass Document Title: =============== Mozilla Bug Bounty 5 - WireTap Remote Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=953 Mozilla Bug Tracking ID: 875818 Video:...

Novell GroupWise Client 8.x < 8.0.3 / 2012.x < 2012 SP1 Unspecified File Handling Arbitrary Code Execution

The version of Novell GroupWise Client installed on the remote Windows host is 8.x earlier than 8.0.3 8.0.3.21955 or 2012.x earlier than 2012 SP1 12.0.1.13731. As such, it is reportedly affected by an unspecified code execution vulnerability. By tricking a user into opening a specially crafted...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Email application in HP Palm webOS 1.4.5 and 1.4.5.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1737

CVE-2011-1737 involves the HP/Palm webOS Email application (versions 1.4.5 and 1.4.5.1). The vulnerability is described as multiple XSS flaws that allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affects the HP Palm webOS Email component; CVSS 2.0 base score ...

CVE-2011-1737: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Email application in HP Palm webOS 1.4.5 and 1.4.5.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Palm WebOS 1.01.1 - Email Arbitrary Script Injection

Palm WebOS 1.01.1 - Email Arbitrary Script Injection source: https://www.securityfocus.com/bid/36592/info Palm WebOS is prone to an arbitrary-script-injection vulnerability because the integrated email application fails to properly sanitize user-supplied input. An attacker can exploit this issue ...

HP-UX Update for Thunderbird HPSBUX02156

Check for the Version of Thunderbird OpenVAS Vulnerability Test HP-UX Update for Thunderbird HPSBUX02156 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...