CVE-2016-1000037: Improper Neutralization of Input During Web Page Generation

Pagure: XSS possible in file attachment endpoint...

CVE-2019-4409

HCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks. On the Problem Report page of the Traveler servlet pages, there is a field to specify a file attachment to provide additional problem details. An invalid file name returns an error message that includes the...

CVE-2019-4409: Improper Neutralization of Input During Web Page Generation

HCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks. On the Problem Report page of the Traveler servlet pages, there is a field to specify a file attachment to provide additional problem details. An invalid file name returns an error message that includes the...

CVE-2019-17399

The Shack Forms Pro extension before 4.0.32 for Joomla! allows path traversal via a file attachment...

CVE-2019-17399

The Shack Forms Pro extension before 4.0.32 for Joomla! allows path traversal via a file attachment...

Path traversal

The Shack Forms Pro extension before 4.0.32 for Joomla! allows path traversal via a file attachment...

CVE-2019-17399

The Shack Forms Pro extension before 4.0.32 for Joomla! allows path traversal via a file attachment...

CVE-2019-17399

The CVE-2019-17399 entry concerns the Shack Forms Pro extension for Joomla! (pre-4.0.32). The connected sources confirm a path traversal vulnerability triggered by a file attachment, affecting Joomla! installations using Shack Forms Pro before 4.0.32. The core issue is a file-path traversal flaw ...

CVE-2019-17399: Improper Limitation of a Pathname to a Restricted Directory

The Shack Forms Pro extension before 4.0.32 for Joomla! allows path traversal via a file attachment...

Joomla JS Support Ticket Component (com_jssupportticket) 1.1.5 - Arbitrary File Download Vulnerabili

Exploit for php platform in category web applications Exploit Title: Joomla! component comjssupportticket - Arbitrary File Download Dork: inurl:"index.php?option=comjssupportticket" Exploit Author: qw3rTyTy Vendor Homepage: http://joomsky.com/ Software Link:...

poppler: NULL pointer dereference in _poppler_attachment_new

Poppler before 0.70.0 has a NULL pointer dereference in popplerattachmentnew when called from popplerannotfileattachmentgetattachment...

CVE-2019-7211

SmarterTools SmarterMail 16.x before build 6995 has stored XSS. JavaScript code could be executed on the application by opening a malicious email or when viewing a malicious file attachment...

Cross site scripting

SmarterTools SmarterMail 16.x before build 6995 has stored XSS. JavaScript code could be executed on the application by opening a malicious email or when viewing a malicious file attachment...

CVE-2019-7211

SmarterTools SmarterMail 16.x before build 6995 has stored XSS. JavaScript code could be executed on the application by opening a malicious email or when viewing a malicious file attachment...

CVE-2019-7211: Improper Neutralization of Input During Web Page Generation

SmarterTools SmarterMail 16.x before build 6995 has stored XSS. JavaScript code could be executed on the application by opening a malicious email or when viewing a malicious file attachment...

Unable to attach from Citrix Files/Quick Edit into Secure Mail

Facing an issue where you open a number of different file types in Citrix Files/Quick Edit and select "Open In" and select "Copy to Secure Mail" and you receive a "Unable to attach file" error in Secure Mail...

CVE-2019-1995: Undefined Security Weakness

In ComposeActivityEmail of ComposeActivityEmail.java, there is a possible way to silently attach files to an email due to a confused deputy. This could lead to local information disclosure, sending files accessible to AOSP Mail to a remote email recipient, with no additional execution privileges...

SUSE-SU-2019:0338-1 Security update for MozillaThunderbird

This update for MozillaThunderbird to version 60.5 fixes the following issues: Security vulnerabilities addressed MSFA 2019-03 MSFA 2018-31 bsc1122983 bsc1119105: CVE-2018-18500: Use-after-free parsing HTML5 stream CVE-2018-18505: Privilege escalation through IPC channel messages CVE-2016-5824 Do...

CVE-2018-8579

An information disclosure vulnerability exists when attaching files to Outlook messages, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office. This CVE ID is unique from CVE-2018-8558...

Microsoft Outlook Information Disclosure Vulnerability

An information disclosure vulnerability exists when attaching files to Outlook messages. This vulnerability could potentially allow users to share attached files such that they are accessible by anonymous users where they should be restricted to specific users. To exploit this vulnerability, an...