CVE-2018-4111

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Mail" component. It allows man-in-the-middle attackers to read S/MIME encrypted message content by sending HTML e-mail that references remote resources but lacks a valid S/MIME signature...

CVE-2018-4174

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Mail" component. It allows man-in-the-middle attackers to read S/MIME encrypted messages by leveraging an inconsistency in the user interface...

CVE-2018-4111

CVE-2018-4111 affects macOS Mail on macOS versions before 10.13.4. The flaw lets a man-in-the-middle read S/MIME encrypted message content by delivering an HTML email that references remote resources but lacks a valid S/MIME signature. The public description states Apple addressed this by not loa...

CVE-2018-4174

CVE-2018-4174 affects Apple iOS <11.3 and macOS

KLA11220 Multiple vulnerabilities in Wireshark

Multiple serious vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. A vulnenerability related to MP4 dissector can be exploited remotely via specially designed packet or packet...

CVE-2018-4111: Improper Verification of Cryptographic Signature

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Mail" component. It allows man-in-the-middle attackers to read S/MIME encrypted message content by sending HTML e-mail that references remote resources but lacks a valid S/MIME signature...

PT-2018-16457

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.3 macOS versions prior to 10.13.4 Description The issue involves the Mail component and allows man-in-the-middle attackers to read S/MIME encrypted messages by leveraging an inconsistency in the user interface...

CVE-2018-4174: Undefined Security Weakness

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Mail" component. It allows man-in-the-middle attackers to read S/MIME encrypted messages by leveraging an inconsistency in the user interface...

PT-2018-16401

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.13.4 Description The issue involves the Mail component and allows man-in-the-middle attackers to read S/MIME encrypted message content. This is achieved by sending HTML e-mail that references remote resources but lac...

CVE-2018-5140

Image for moz-icons can be accessed through the "moz-icon:" protocol through script in web content even when otherwise prohibited. This could allow for information leakage of which applications are associated with specific MIME types by a malicious page. This vulnerability affects Firefox 59...

UBUNTU-CVE-2018-5140

Image for moz-icons can be accessed through the "moz-icon:" protocol through script in web content even when otherwise prohibited. This could allow for information leakage of which applications are associated with specific MIME types by a malicious page. This vulnerability affects Firefox 59...

Debian: Security Advisory (DLA-1101-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PerfexCRM 1.9.7 - Arbitrary File Upload

Exploit Title: PerfexCRM 1.9.7 – Unrestricted php5 File upload Exploit Author: Ahmad Mahfouz Description: PerfexCRM 1.9.7 prone to unrestricted file upload that lead to system take over by misconfigured elfinder plugin Contact: http://twitter.com/eln1x Date: 12/01/2018 CVE: CVE-2017-17976 Version...

Updated emacs packages fix security vulnerability

Charles A. Roelli discovered that Emacs is vulnerable to arbitrary code execution when rendering text/enriched MIME data e.g. when using Emacs-based mail clients CVE-2017-14482...

MGASA-2017-0476 Updated emacs packages fix security vulnerability

Charles A. Roelli discovered that Emacs is vulnerable to arbitrary code execution when rendering text/enriched MIME data e.g. when using Emacs-based mail clients CVE-2017-14482...

The vulnerability of Google Chrome’s Blink rendering module allows a hacker to bypass cross-origin resource sharing restrictions.

The vulnerability of the Blink rendering module in Google Chrome browsers exists due to insufficient validation of input data MIME-type headers with X-XSS-Protection attributes. Exploiting this vulnerability allows a malicious actor to bypass CORS Cross-Origin Resource Sharing checks by using a...

CVE-2017-13871

An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Mail" component. It allows remote attackers to read cleartext e-mail content for which S/MIME encryption was intended by leveraging the lack of installation of an S/MIME certificate by the...

CVE-2017-13874

An issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue involves the "Mail" component. It might allow remote attackers to bypass an intended encryption protection mechanism by leveraging incorrect S/MIME certificate selection...

CVE-2017-13860

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. The issue involves the "Mail Drafts" component. It allows man-in-the-middle attackers to read e-mail content by leveraging mishandling of S/MIME credential encryption...

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue involves the "Mail" component. It might allow remote attackers to bypass an intended encryption protection mechanism by leveraging incorrect S/MIME certificate selection...