CVE-2020-14064

The vulnerability CVE-2020-14064 affects IceWarp Email Server 12.3.0.1 with an incorrect access control for user accounts. The connected documents provide no concrete exploit details or remediation specifics. No further technical details are available in the provided sources; monitor for updates ...

CVE-2020-14065: Unrestricted Upload of File with Dangerous Type

IceWarp Email Server 12.3.0.1 allows remote attackers to upload files and consume disk space...

PT-2020-13872

Name of the Vulnerable Software and Affected Versions IceWarp Email Server version 12.3.0.1 Description The issue allows remote attackers to upload files and consume disk space. Recommendations For IceWarp Email Server version 12.3.0.1, at the moment, there is no information about a newer version...

PT-2020-13873

Name of the Vulnerable Software and Affected Versions IceWarp Email Server version 12.3.0.1 Description The issue allows remote attackers to upload JavaScript files that are dangerous for clients to access. Recommendations For IceWarp Email Server version 12.3.0.1, consider restricting file uploa...

PT-2020-13871

Name of the Vulnerable Software and Affected Versions IceWarp Email Server version 12.3.0.1 Description The issue is related to Incorrect Access Control for user accounts. Recommendations For IceWarp Email Server version 12.3.0.1, at the moment, there is no information about a newer version that...

CVE-2020-14064: Exposure of Resource to Wrong Sphere

IceWarp Email Server 12.3.0.1 has Incorrect Access Control for user accounts...

CVE-2020-14066: Unrestricted Upload of File with Dangerous Type

IceWarp Email Server 12.3.0.1 allows remote attackers to upload JavaScript files that are dangerous for clients to access...

CVE-2017-18911

An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. The X.509 certificate validation can be skipped for a TLS-based e-mail server...

CVE-2017-18911

An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. The X.509 certificate validation can be skipped for a TLS-based e-mail server...

Code injection

An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. The X.509 certificate validation can be skipped for a TLS-based e-mail server...

CVE-2017-18911

An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. The X.509 certificate validation can be skipped for a TLS-based e-mail server...

PT-2020-8457

Name of the Vulnerable Software and Affected Versions: Mattermost Server versions prior to 3.8.2 Mattermost Server versions prior to 3.7.5 Mattermost Server versions prior to 3.6.7 Description: An issue was discovered that allows the X.509 certificate validation to be skipped for a TLS-based e-ma...

Debian: Security Advisory (DSA-4690-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 4690-1] dovecot security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4690-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 20, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4690-1] dovecot security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4690-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 20, 2020 https://www.debian.org/security/faq -...

USN-4361-1: Dovecot vulnerabilities

Philippe Antoine discovered that Dovecot incorrectly handled certain data. An attacker could possibly use this issue to cause a denial of service. CVE-2020-10957, CVE-2020-10967 Philippe Antoine discovered that Dovecot incorrectly handled certain data. An attacker could possibly use this issue to...

keycloak: improper verification of certificate with host mismatch could result in information disclosure

A flaw was found in Keycloak, where it does not perform the TLS hostname verification while sending emails using the SMTP server. This flaw allows an attacker to perform a man-in-the-middle MITM attack...

If You Can't Patch Your Email Server, You Should Not Be Running It

--- CVE-2020-0688 Scan Results, per Rapid7 tl;dr -- it's the title of the post: "If You Can't Patch Your Email Server, You Should Not Be Running It." I read a disturbing story today with the following news: "Starting March 24, Rapid7 used its Project Sonar internet-wide survey tool to discover al...

Information Disclosure Vulnerability in Multiple Rockwell Automation Products

Rockwell Automation MicroLogix 1400 Controllers Series A and so on are the products of Rockwell Automation, Inc.Rockwell Automation MicroLogix 1400 Controllers Series A is a programmable logic controller.MicroLogix 1100 Controllers is a programmable logic controller.RSLogix 500 Software is a set ...

New OpenSMTPD RCE Flaw Affects Linux and OpenBSD Email Servers

OpenSMTPD has been found vulnerable to yet another critical vulnerability that could allow remote attackers to take complete control over email servers running BSD or Linux operating systems. OpenSMTPD , also known as OpenBSD SMTP Server, is an open-source implementation of the Simple Mail Transf...