6214 matches found
CVE-2018-12372
CVE-2018-12372 affects Mozilla Thunderbird. Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext in HTML reply/forward messages. Public documentation lists affected product: Thunderbird prior to 52.9. Root cause described across connected sources as leakage of S...
CVE-2018-12373
dDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when included in a HTML reply/forward. This vulnerability affects Thunderbird 52.9...
CVE-2018-12372: Exposure of Sensitive Information to an Unauthorized Actor
Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunderbird 52.9...
CVE-2018-12373: Exposure of Sensitive Information to an Unauthorized Actor
dDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when included in a HTML reply/forward. This vulnerability affects Thunderbird 52.9...
Mime Mail - Critical - Remote Code Execution - SA-CONTRIB-2018-068
The MIME Mail module allows to send MIME-encoded e-mail messages with embedded images and attachments. The module doesn't sufficiently sanitized some variables for shell arguments when sending email, which could lead to arbitrary remote code execution. This issue is related to the Drupal Core...
Microsoft Office: Mime Sniffing Safety Feature
This test checks the setting for policy OpenVAS Vulnerability Test $Id: officemimesniffingsafety.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Mime Sniffing Safety Feature Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...
Microsoft Office: Consistent Mime Handling
This test checks the setting for policy OpenVAS Vulnerability Test $Id: officeconsistentmimehandling.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Consistent Mime Handling Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...
[SECURITY] Fedora 29 Update: nss-3.39.0-2.fc29
Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...
[SECURITY] Fedora 27 Update: nss-3.39.0-1.0.fc27
Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...
GHSA-M53F-RHQ8-Q6HF Moderate severity vulnerability that affects actionpack
Withdrawn, accidental duplicate publish. actionpack/lib/actiondispatch/http/mimetype.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote...
[SECURITY] Fedora 28 Update: nss-3.39.0-1.0.fc28
Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...
Design/Logic Flaw
In Gogs 0.11.53, an attacker can use a crafted .eml file to trigger MIME type sniffing, which leads to XSS, as demonstrated by Internet Explorer, because an "X-Content-Type-Options: nosniff" header is not sent...
CVE-2018-17031
In Gogs 0.11.53, an attacker can use a crafted .eml file to trigger MIME type sniffing, which leads to XSS, as demonstrated by Internet Explorer, because an "X-Content-Type-Options: nosniff" header is not sent...
CVE-2018-17031
In Gogs 0.11.53, an attacker can use a crafted .eml file to trigger MIME type sniffing, which leads to XSS, as demonstrated by Internet Explorer, because an "X-Content-Type-Options: nosniff" header is not sent...
CVE-2018-17031
In Gogs 0.11.53, an attacker can use a crafted .eml file to trigger MIME type sniffing, which leads to XSS, as demonstrated by Internet Explorer, because an "X-Content-Type-Options: nosniff" header is not sent...
CVE-2018-17031
CVE-2018-17031 affects Gogs 0.11.53 where a crafted .eml file can trigger MIME-type sniffing, causing XSS. The root cause is the absence of the X-Content-Type-Options: nosniff header, enabling the browser to sniff MIME types and execute injected scripts. This is supported by multiple connected en...
PT-2018-13849 · Gogs · Gogs
Name of the Vulnerable Software and Affected Versions: Gogs version 0.11.53 Description: The issue allows an attacker to trigger MIME type sniffing using a crafted .eml file, leading to XSS. This is demonstrated by Internet Explorer and is caused by the lack of an "X-Content-Type-Options: nosniff...
CVE-2018-17031: Improper Neutralization of Input During Web Page Generation
In Gogs 0.11.53, an attacker can use a crafted .eml file to trigger MIME type sniffing, which leads to XSS, as demonstrated by Internet Explorer, because an "X-Content-Type-Options: nosniff" header is not sent...
Amazon Linux 2 : thunderbird (ALAS-2018-1061)
Use-after-free when appending DOM nodes CVE-2018-12363 Use-after-free using focus CVE-2018-12360 Compromised IPC child process can list local filenames CVE-2018-12365 Buffer overflow using computed size of canvas element CVE-2018-12359 Using form to exfiltrate encrypted mail part by pressing ente...