608 matches found
CVE-2023-39699
IceWarp Mail Server v10.4.5 was discovered to contain a local file inclusion LFI vulnerability via the component /calendar/minimizer/index.php. This vulnerability allows attackers to include or execute files from the local file system of the targeted server...
IceWarp Mail Server 路径遍历漏洞
IceWarp Mail Server is a mail server product from the Czech company IceWarp IceWarp. The product supports email archiving, SmartAttach attachments, automatic migration, and more. A security vulnerability exists in IceWarp Mail Server version v10.4.5, which originates from a Local File Inclusion L...
PT-2023-6986 · Icewarp · Icewarp Server
Name of the Vulnerable Software and Affected Versions: IceWarp Server version 11.4.6.0 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited by a remote attacker to conduct cross-site scripting attacks via the color parameter...
PT-2023-5329 · Icewarp · Icewarp Webclient
Name of the Vulnerable Software and Affected Versions: IceWarp Corporation WebClient version 10.2.1 Description: The issue is related to a Cross Site Scripting vulnerability that allows a remote attacker to execute arbitrary code via a crafted payload to the mid parameter. This can enable the...
CVE-2021-36580
Open Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 13.0.1.2 via the referer parameter...
CVE-2021-36580
Open Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 13.0.1.2 via the referer parameter...
Open redirect
Open Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 13.0.1.2 via the referer parameter...
CVE-2021-36580
Open Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 13.0.1.2 via the referer parameter...
CVE-2021-36580
IceWarp Mail Server (IceWarp Server Deep Castle 2 Update 1, version 13.0.1.2) is vulnerable to an open redirect via the referer parameter. The Nuclei template CVE-2021-36580 confirms this open redirect, enabling potential phishing or unintended redirects. Remediation is to apply the latest securi...
CVE-2021-36580
Open Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 13.0.1.2 via the referer parameter...
IceWarp Mail Server 输入验证错误漏洞
IceWarp Mail Server is a mail server product from the Czech company IceWarp IceWarp. The product supports email archiving, SmartAttach attachments, automatic migration, and more. A security vulnerability exists in IceWarp Mail Server that stems from an open redirection vulnerability via the refer...
PT-2023-12292 · Icewarp · Icewarp Mail Server
Name of the Vulnerable Software and Affected Versions: IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 version 13.0.1.2 Description: The issue is related to an Open Redirect vulnerability. It exists via the referer parameter. Recommendations: For IceWarp MailServer IceWarp Server Deep...
CVE-2023-37728
IceWarp v10.2.1 was discovered to contain cross-site scripting XSS vulnerability via the color parameter...
CVE-2023-37728
IceWarp v10.2.1 was discovered to contain cross-site scripting XSS vulnerability via the color parameter...
CVE-2023-37728
IceWarp v10.2.1 was discovered to contain cross-site scripting XSS vulnerability via the color parameter...
Cross site scripting
IceWarp v10.2.1 was discovered to contain cross-site scripting XSS vulnerability via the color parameter...
CVE-2023-37728
IceWarp v10.2.1 was discovered to contain cross-site scripting XSS vulnerability via the color parameter...
EUVD-2023-41605
IceWarp v10.2.1 was discovered to contain cross-site scripting XSS vulnerability via the color parameter...
Icewarp Icearp 跨站脚本漏洞
Icewarp Icearp is an email, messaging and collaboration service for small, medium and enterprise-level businesses from the Czech company Icewarp. A cross-site scripting vulnerability exists in Icewarp Icearp version 10.2.1, which stems from the presence of a cross-site scripting XSS vulnerability...
CVE-2023-37728
IceWarp Webmail Server v10.2.1 is affected by a Cross‑Site Scripting (XSS) vulnerability reachable via the color parameter. The Nuclei template and related references describe an XSS that could allow an unauthenticated attacker to inject JavaScript and potentially access user sessions (cookie lea...