Lucene search
+L

15292 matches found

Cvelist
Cvelist
added 2024/12/09 11:30 a.m.24 views

CVE-2023-48332 WordPress Mail Bank – #1 Mail SMTP Plugin for WordPress plugin <= 4.0.14 - Broken Access Control vulnerability

Missing Authorization vulnerability in Varun Sharma Mail Bank - 1 Mail SMTP Plugin for WordPress wp-mail-bank allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mail Bank - 1 Mail SMTP Plugin for WordPress: from n/a through = 4.0.14...

4.3CVSS0.00446EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/09 11:30 a.m.57 views

CVE-2023-48332

CVE-2023-48332 describes a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin “Mail Bank – #1 Mail SMTP Plugin for WordPress” (also referenced as wp-mail-bank). Affected versions are 4.0.14 and earlier. The issue arises from incorrectly configured access control s...

4.3CVSS7.3AI score0.00446EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:0 a.m.7 views

WordPress plugin Mail Bank 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS8.7AI score0.00446EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/12/06 12:0 a.m.11 views

The vulnerability of NextCloud Mail’s email client allows unauthorized individuals to disclose confidential information, enabling attackers to expose protected data.

The vulnerability of NextCloud Mail’s email client stems from improper automatic configuration. Exploiting this vulnerability allows a malicious actor to disclose protected information remotely...

8.2CVSS5.4AI score0.00698EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/12/06 12:0 a.m.11 views

The vulnerability of NextCloud Mail’s email client, related to improper access control, allows attackers to disclose protected information.

The vulnerability of NextCloud Mail’s email client stems from insufficient access control. Exploiting this vulnerability allows a malicious actor to disclose protected information from a remote location...

4CVSS5.5AI score0.00502EPSS
SaveExploits0References5Affected Software2
Fedora
Fedora
added 2024/12/05 1:34 a.m.14 views

[SECURITY] Fedora 40 Update: thunderbird-128.5.0-1.fc40

Mozilla Thunderbird is a standalone mail and newsgroup client...

7.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/12/05 12:0 a.m.28 views

PT-2024-41036 · Stalker · Communigate Pro

Name of the Vulnerable Software and Affected Versions: CommuniGate Pro affected versions not specified Description: The issue is related to a buffer overflow on the stack in the CommuniGate Pro mail server. Exploitation of this issue may allow a remote attacker to execute arbitrary code...

10CVSS8.2AI score
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2024/12/03 1:0 p.m.12 views

Moderate: Red Hat Bug Fix Advisory: Updated rhel9/thunderbird-flatpak container image

An updated rhel9/thunderbird-flatpak container image is now available in the Red Hat container registry. Mozilla Thunderbird is a standalone mail and newsgroup client. Flatpak is a system for running graphical applications as containers. Installing an application as a Flatpak rather than as an...

5.4CVSS6.9AI score0.00444EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2024/12/03 12:26 p.m.17 views

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

8.8CVSS6.8AI score0.00768EPSS
SaveExploits0References8
Redos
Redos
added 2024/12/03 12:0 a.m.19 views

ROS-20241203-07

Nextcloud mail client vulnerability is related to incorrect automatic configuration. Exploitation of the vulnerability could allow an attacker acting remotely to impact the confidentiality Nextcloud mail client vulnerability is related to insufficient access control. Exploitation of the...

8.2CVSS7.2AI score0.00698EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2024/12/02 7:1 p.m.23 views

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

8.8CVSS6.8AI score0.00768EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2024/12/02 5:16 p.m.20 views

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

8.8CVSS6.8AI score0.00768EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2024/12/02 1:28 a.m.21 views

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

8.8CVSS6.8AI score0.00768EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2024/12/02 12:0 a.m.11 views

RHEL 9 : thunderbird (RHSA-2024:10667)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:10667 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: Potential disclosure of plaintext in OpenPGP...

8.8CVSS7.4AI score0.00768EPSS
SaveExploits0References16
NVD
NVD
added 2024/11/30 10:15 p.m.18 views

CVE-2024-53772

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Mail Picker mail-picker allows DOM-Based XSS.This issue affects Mail Picker: from n/a through = 1.0.15...

6.5CVSS0.00285EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/30 9:24 p.m.9 views

CVE-2024-53772 WordPress Mail Picker plugin <= 1.0.14 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Mail Picker allows DOM-Based XSS.This issue affects Mail Picker: from n/a through 1.0.14...

6.5CVSS7AI score0.00285EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/30 9:24 p.m.49 views

CVE-2024-53772

CVE-2024-53772 refers to a DOM-based XSS in the Mail Picker plugin for WordPress. Affected software: PickPlugins Mail Picker, versions up to and including 1.0.14 (WordPress Mail Picker). The vulnerability arises from Improper Neutralization of Input During Web Page Generation, enabling cross-site...

6.5CVSS7.2AI score0.00285EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/30 9:24 p.m.26 views

CVE-2024-53772 WordPress Mail Picker plugin <= 1.0.15 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Mail Picker mail-picker allows DOM-Based XSS.This issue affects Mail Picker: from n/a through = 1.0.15...

6.5CVSS0.00285EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/30 12:0 a.m.6 views

WordPress plugin Mail Picker 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS8AI score0.00285EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/30 12:0 a.m.9 views

PT-2024-35884 · Pickplugins · Pickplugins Mail Picker

Name of the Vulnerable Software and Affected Versions: PickPlugins Mail Picker versions 1.0.14 and earlier Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing DOM-Based XSS. This means that an attacker...

6.5CVSS9AI score0.00285EPSS
SaveExploits0References5
Rows per page
Query Builder