6200 matches found
CVE-2019-16216
Zulip server before 2.0.5 incompletely validated the MIME types of uploaded files. A user who is logged into the server could upload files of certain types to mount a stored cross-site scripting attack on other logged-in users. On a Zulip server using the default local uploads backend, the attack...
CVE-2019-16216
Zulip server before 2.0.5 incompletely validated the MIME types of uploaded files. A user who is logged into the server could upload files of certain types to mount a stored cross-site scripting attack on other logged-in users. On a Zulip server using the default local uploads backend, the attack...
CVE-2019-16216: Improper Neutralization of Input During Web Page Generation
Zulip server before 2.0.5 incompletely validated the MIME types of uploaded files. A user who is logged into the server could upload files of certain types to mount a stored cross-site scripting attack on other logged-in users. On a Zulip server using the default local uploads backend, the attack...
CVE-2019-11739
Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunderbird 68.1 and Thunderbird 60.9...
Important: Red Hat Security Advisory: thunderbird security update
An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
Debian DSA-4523-1 : thunderbird - security update
Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary code, cross-site scripting, information disclosure and a covert content attack on S/MIME encryption using a crafted multipart/alternative message. C Tenable Network Security, Inc...
[SECURITY] [DSA 4523-1] thunderbird security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4523-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 15, 2019 https://www.debian.org/security/faq -...
MGASA-2019-0275 Updated thunderbird packages fix security vulnerabilities
Updated thunderbird packages fix security vulnerabilities: Covert Content Attack on S/MIME encryption using a crafted multipart/ alternative message CVE-2019-11739. Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9 CVE-2019-11740...
Updated thunderbird packages fix security vulnerabilities
Updated thunderbird packages fix security vulnerabilities: Covert Content Attack on S/MIME encryption using a crafted multipart/ alternative message CVE-2019-11739. Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9 CVE-2019-11740...
Security vulnerabilities fixed in - Thunderbird 68.1 — Mozilla
Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in a a HTML reply/forward. A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. This results in a potentially exploitable crash. Some...
Security vulnerabilities fixed in - Thunderbird 60.9 — Mozilla
Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in a a HTML reply/forward. A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. This results in a potentially exploitable crash. Some...
PT-2019-5317
Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 60.9 Thunderbird versions prior to 68.1 Description The issue is related to the Secure/Multipurpose Internet Mail Extensions S/MIME functionality in the Thunderbird email client, specifically concerning the lack o...
CVE-2019-15640
Limesurvey before 3.17.10 does not validate both the MIME type and file extension of an image...
CVE-2019-15640
Limesurvey before 3.17.10 does not validate both the MIME type and file extension of an image...
CVE-2019-15640
Limesurvey before 3.17.10 does not validate both the MIME type and file extension of an image...
PT-2019-14312
Name of the Vulnerable Software and Affected Versions Limesurvey versions prior to 3.17.10 Description The issue arises from inadequate validation of both the MIME type and file extension of an image. This lack of validation could potentially be exploited. Recommendations For versions prior to...
CVE-2019-15640: Improper Input Validation
Limesurvey before 3.17.10 does not validate both the MIME type and file extension of an image...
WordPress Add Mime Types 2.2.1 Cross Site Request Forgery
Exploit Title: CSRF vulnerabilities in WP Add Mime Types Plugin...
