CVE-2020-25104

eramba c2.8.1 and Enterprise before e2.19.3 allows XSS via a crafted filename for a file attached to an object. For example, the filename has a complete XSS payload followed by the .png extension...

CVE-2020-25104: Improper Neutralization of Input During Web Page Generation

eramba c2.8.1 and Enterprise before e2.19.3 allows XSS via a crafted filename for a file attached to an object. For example, the filename has a complete XSS payload followed by the .png extension...

CVE-2020-1493

An information disclosure vulnerability exists when attaching files to Outlook messages. This vulnerability could potentially allow users to share attached files such that they are accessible by anonymous users where they should be restricted to specific users. To exploit this vulnerability, an...

CVE-2020-1493: Insecure Storage of Sensitive Information

An information disclosure vulnerability exists when attaching files to Outlook messages. This vulnerability could potentially allow users to share attached files such that they are accessible by anonymous users where they should be restricted to specific users. To exploit this vulnerability, an...

[SECURITY] [DLA 2306-1] libphp-phpmailer security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2306-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA August 01, 2020 https://wiki.debian.org/LTS -...

Updated php-phpmailer packages fix security vulnerability

Fix insufficient output escaping bug in file attachment names CVE-2020-13625...

MGASA-2020-0313 Updated php-phpmailer packages fix security vulnerability

Fix insufficient output escaping bug in file attachment names CVE-2020-13625...

CVE-2020-5582

Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to alter the data for the file attached to Report via unspecified vectors...

CVE-2020-5582: Undefined Security Weakness

Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to alter the data for the file attached to Report via unspecified vectors...

CVE-2019-20884

An issue was discovered in Mattermost Server before 5.8.0. It allows attackers to partially attach a file to more than one post...

Design/Logic Flaw

An issue was discovered in Mattermost Server before 5.8.0. It allows attackers to partially attach a file to more than one post...

CVE-2019-20884

Mattermost Server prior to 5.8.0 has a vulnerability that allows attackers to partially attach a file to more than one post. The connected documents confirm the issue and the affected version range, but no concrete root-cause, exploit details, or mitigation steps are provided in the texts. Remedi...

CVE-2019-20884: Undefined Security Weakness

An issue was discovered in Mattermost Server before 5.8.0. It allows attackers to partially attach a file to more than one post...

PHPMailer < 6.1.6 Output Escaping Vulnerability

PHPMailer contains an output escaping bug when the name of a file attachment contains a double quote character. This can result in the file type being misinterpreted by the receiver or any mail relay processing the message. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be...

CVE-2020-4047: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

In affected versions of WordPress, authenticated users with upload permissions like authors are able to inject JavaScript into some media file attachment pages in a certain way. This can lead to script execution in the context of a higher privileged user when the file is viewed by them. This has...

Unspecified Vulnerability in PHPMailer

PHPMailer is a PHP class library for sending e-mail . A security vulnerability exists in versions of PHPMailer prior to 6.1.6, which stems from the program failing to properly escape double quote characters when the name of a file attachment contains them. An attacker can exploit this vulnerabili...

CVE-2020-13625

PHPMailer before 6.1.6 contains an output escaping bug when the name of a file attachment contains a double quote character. This can result in the file type being misinterpreted by the receiver or any mail relay processing the message...

CVE-2020-13625

PHPMailer before 6.1.6 contains an output escaping bug when the name of a file attachment contains a double quote character. This can result in the file type being misinterpreted by the receiver or any mail relay processing the message...

CVE-2020-13625

PHPMailer before 6.1.6 contains an output escaping bug when the name of a file attachment contains a double quote character. This can result in the file type being misinterpreted by the receiver or any mail relay processing the message...

Double free

PHPMailer before 6.1.6 contains an output escaping bug when the name of a file attachment contains a double quote character. This can result in the file type being misinterpreted by the receiver or any mail relay processing the message...