Debian DLA-1925-1 : python2.7 security update

A vulnerability was discovered in Python, an interactive high-level object-oriented language. CVE-2019-16056 The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a...

CVE-2016-10971

The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an e-mail address is required...

CVE-2016-10971

The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an e-mail address is required...

Design/Logic Flaw

The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an e-mail address is required...

CVE-2016-10971

The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an e-mail address is required...

CVE-2016-10971: Improper Privilege Management

The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an e-mail address is required...

Improper Authorization in Bitbucket Server through ATST Plugin - CVE-2019-15005

The Atlassian Troubleshooting and Support Tools ATST plugin prior to version 1.17.2 which was used in Bitbucket Server & Bitbucket Data Center before version 6.6.0, allows an unprivileged user to initiate periodic log scans and send the results to a user-specified email address due to a missing...

CVE-2019-16056

Removed by vendor...

CVE-2019-16056

An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To header...

CVE-2017-18479

In cPanel before 62.0.4, WHM SSL certificate generation uses an unreserved e-mail address SEC-209...

Design/Logic Flaw

In cPanel before 62.0.4, WHM SSL certificate generation uses an unreserved e-mail address SEC-209...

CVE-2017-18382

CVE-2017-18382 affects cPanel prior to 68.0.15, where DNS zone SOA records can contain an unreserved email address (SEC-306). Root cause: the vulnerability arises from how the SOA RDATA handles the email field. Impact: CVSS3 base score 2.7 (LOW); confidentiality impact LOW, no integrity/availabil...

CVE-2016-10765

edx-platform before 2016-06-10 allows account activation with a spoofed e-mail address...

CVE-2016-10765: Improper Input Validation

edx-platform before 2016-06-10 allows account activation with a spoofed e-mail address...

CVE-2018-19580

All versions of GitLab prior to 11.5.1, 11.4.8, and 11.3.11 do not send an email to the old email address when an email address change is made...

Code injection

All versions of GitLab prior to 11.5.1, 11.4.8, and 11.3.11 do not send an email to the old email address when an email address change is made...

CVE-2018-19580

All versions of GitLab prior to 11.5.1, 11.4.8, and 11.3.11 do not send an email to the old email address when an email address change is made...

CVE-2018-19580

CVE-2018-19580 affects GitLab versions prior to 11.5.1, 11.4.8, and 11.3.11. The issue is that when an account’s email address is changed, GitLab does not send a notification email to the old address. The connected documents confirm the affected versions and the observed behavior, but do not prov...

CVE-2019-13240

An issue was discovered in GLPI before 9.4.1. After a successful password reset by a user, it is possible to change that user's password again during the next 24 hours without any information except the associated email address...

CVE-2019-13240: Weak Password Recovery Mechanism for Forgotten Password

An issue was discovered in GLPI before 9.4.1. After a successful password reset by a user, it is possible to change that user's password again during the next 24 hours without any information except the associated email address...