Lucene search
+L

2322 matches found

osv_cve
osv_cve
•added 2009/05/14 5:30 p.m.•15 views

CVE-2009-1631

The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files...

5.7AI score
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2009/05/14 5:30 p.m.•31 views

CVE-2009-1631

The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files...

2.1CVSS5.9AI score0.0044EPSS
SaveExploits1References1
Prion
Prion
•added 2009/05/14 5:30 p.m.•26 views

Design/Logic Flaw

The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files...

2.1CVSS6.2AI score0.0044EPSS
SaveExploits1References5Affected Software1
osv_debian
osv_debian
•added 2009/05/14 5:30 p.m.•34 views

DEBIAN-CVE-2009-1631

The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files...

2.1CVSS6.1AI score0.0044EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2009/05/14 5:00 p.m.•35 views

CVE-2009-1631

The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files...

2.1CVSS5.7AI score0.0044EPSS
SaveExploits1
CVE
CVE
•added 2009/05/14 5:00 p.m.•83 views

CVE-2009-1631

Evolution 2.26.1 and earlier contains a local information‑disclosure issue in the Mailer component: .evolution directory (and related subpaths) has world‑readable permissions, enabling local users to read sensitive mail-related files. Root cause is file/directory permissions, not a remote/vector-...

2.1CVSS5.9AI score0.0044EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2009/05/14 5:00 p.m.•38 views

CVE-2009-1631

The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files...

5.7AI score0.0044EPSS
SaveExploits1References5
Mend
Mend
•added 2009/05/14 5:00 p.m.•5 views

CVE-2009-1631

The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files...

5.1CVSS0.0044EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/05/14 12:00 a.m.•6 views

CVE-2009-1631: Undefined Security Weakness

The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files...

2.1CVSS5.9AI score0.0044EPSS
SaveExploits1References2
ThreatPost
ThreatPost
•added 2009/05/04 6:16 p.m.•9 views

Art Coviello on Holistic Security, the Future of the Security Industry and the RSA Conference

For the landmark 10th episode of the Digital Underground podcast, Dennis Fisher talks with Art Coviello, president of RSA, the security division of EMC, about the evolution of the RSA Conference, the future of the security industry and whether the compliance mentality is taking the focus off...

1.3AI score
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2009/04/30 12:00 a.m.•33 views

openSUSE 10 Security Update : evolution-data-server (evolution-data-server-6171)

camel's NTLM SASL authentication mechanism as used by evolution did not properly validate server's challenge packets CVE-2009-0582. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

5.8CVSS5.9AI score0.02269EPSS
SaveExploits1References1
NVD
NVD
•added 2009/04/28 4:30 p.m.•28 views

CVE-2009-1457

Cross-site scripting XSS vulnerability in player.php in Nuke Evolution Xtreme 2.x allows remote attackers to inject arbitrary web script or HTML via the defaultVisualExt parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS5.6AI score0.01033EPSS
SaveExploits0References4
Prion
Prion
•added 2009/04/28 4:30 p.m.•18 views

Cross site scripting

Cross-site scripting XSS vulnerability in player.php in Nuke Evolution Xtreme 2.x allows remote attackers to inject arbitrary web script or HTML via the defaultVisualExt parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS6AI score0.01033EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2009/04/28 4:00 p.m.•33 views

CVE-2009-1457

Cross-site scripting XSS vulnerability in player.php in Nuke Evolution Xtreme 2.x allows remote attackers to inject arbitrary web script or HTML via the defaultVisualExt parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

5.6AI score0.01033EPSS
SaveExploits0References4
CVE
CVE
•added 2009/04/28 4:00 p.m.•52 views

CVE-2009-1457

CVE-2009-1457 describes a cross-site scripting (XSS) vulnerability in the player.php component of Nuke Evolution Xtreme 2.x, exploitable via the defaultVisualExt parameter. The issue allows remote attackers to inject arbitrary web script or HTML. The connected documents confirm the affected produ...

4.3CVSS5.7AI score0.01033EPSS
SaveExploits0References4Affected Software1
Fedora
Fedora
•added 2009/04/28 1:20 a.m.•28 views

[SECURITY] Fedora 9 Update: evolution-rss-0.1.0-11.fc9

This is an evolution plugin which enables evolution to read rss feeds...

9.3CVSS3.1AI score0.08387EPSS
SaveExploits2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/04/28 12:00 a.m.•6 views

CVE-2009-1457: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in player.php in Nuke Evolution Xtreme 2.x allows remote attackers to inject arbitrary web script or HTML via the defaultVisualExt parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS6AI score0.01033EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2009/04/23 12:00 a.m.•14 views

MDVA-2009:048 : evolution

This update prevents unwanted dependency with gpilotd bug 46302. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was automatically generated from Mandriva...

7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2009/04/23 12:00 a.m.•11 views

MDVA-2008:029 : evolution

A bug in Evolution was preventing the adding of remote calendars, which caused the application to crash. This update provides Evolution 2.12.3 which fixes this bug and other crash bugs, as well as including translation updates. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as t...

7.1AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2009/04/23 12:00 a.m.•15 views

MDKA-2007:130 : evolution-data-server

A reference leak prevented evolution-data-server to correctly shutdown when terminating a GNOME session. This prevented some programs to start correctly when login back after a logout. Updated package fixes this issue, and include stability fixes for Evolution mail client GNOME bugs 271777, 48835...

7.3AI score
SaveExploits0References1
Rows per page
Query Builder