18272 matches found
ROS-20240730-09
Vulnerability of NTLM New Technology LAN Manager protocol implementation in Exim mail server is related to operation exceeding buffer boundaries in memory when processing requests. Exploitation of the vulnerability could allow a remote intruder to gain unauthorized access to protected information...
PT-2024-29516 · Cybonet · Cybonet Pineapp Mail Relay
Name of the Vulnerable Software and Affected Versions: Cybonet PineApp Mail Relay versions prior to 5.2.1 rev 20jun24 Description: The issue concerns an improper limitation of a pathname to a restricted directory, which may lead to unauthorized access risks. There is an urgent need for action to...
SMTP security vulnerabilities
SMTP is a complete e-mail delivery suite for SMTP. A security vulnerability exists in SMTP that stems from the fact that the hosting service does not validate the sender of an e-mail message against an authenticated user, allowing an attacker to spoof another user's e-mail address...
PineApp Mail Secure has a path traversal vulnerability
Cybonet PineApp Mail Secure from Cybonet Israel blocks most malicious email threats at the network perimeter while providing a range of additional options for comprehensive security and message control. A path traversal vulnerability exists in PineApp Mail Secure, which arises from pathnames bein...
CVE-2024-5670
The web services of Softnext's products, Mail SQR Expert and Mail Archiving Expert do not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the remote server...
CVE-2024-5670
The web services of Softnext's products, Mail SQR Expert and Mail Archiving Expert do not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the remote server...
CVE-2024-5670
Summary (CVE-2024-5670) : The web services of Softnext’s Mail SQR Expert and Mail Archiving Expert fail to validate user input, enabling unauthenticated remote attackers to inject and execute arbitrary OS commands on the remote server. This is described across multiple sources as an OS command in...
CVE-2024-5670 Softnext Mail SQR Expert and Mail Archiving Expert - OS Command Injection
The web services of Softnext's products, Mail SQR Expert and Mail Archiving Expert do not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the remote server...
CVE-2024-5670 Softnext Mail SQR Expert and Mail Archiving Expert - OS Command Injection
The web services of Softnext's products, Mail SQR Expert and Mail Archiving Expert do not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the remote server...
Softnext Mail SQR Expert and Mail Archiving Expert: Operating System Command Injection Vulnerabilities
Softnext Mail SQR Expert and Mail Archiving Expert is an email management platform from the Chinese company Softnext Mail. Softnext Mail SQR Expert and Mail Archiving Expert suffers from an operating system command injection vulnerability that originates from the web service not properly validati...
PT-2024-37010 · Softnext · Softnext Mail Archiving Expert +1
Name of the Vulnerable Software and Affected Versions: Softnext Mail SQR Expert affected versions not specified Softnext Mail Archiving Expert affected versions not specified Description: The web services of Softnext's products do not properly validate user input, allowing unauthenticated remote...
CVE-2024-5670: Improper Neutralization of Special Elements used in an OS Command
The web services of Softnext's products, Mail SQR Expert and Mail Archiving Expert do not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the remote server...
RLSA-2024:4624 Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: Mozilla: Race condition in permission assignment CVE-2024-6601 Mozilla: Memory corruption in thread creation CVE-2024-6603 Mozilla: Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, and Thunderbird 115.13...
RLSA-2024:4635 Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: Mozilla: Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, and Thunderbird 115.13 CVE-2024-6604 Mozilla: Race condition in permission assignment CVE-2024-6601 Mozilla: Memory corruption in thread creation...
[SECURITY] Fedora 39 Update: thunderbird-115.13.0-1.fc39
Mozilla Thunderbird is a standalone mail and newsgroup client...
PT-2025-46311
Name of the Vulnerable Software and Affected Versions ManageEngine Exchange Reporter Plus versions 5723 and below Description The software is susceptible to a Stored Cross-Site Scripting XSS issue present in the Mails Deleted or Moved report. This allows for the injection of malicious scripts tha...
Important: Red Hat Security Advisory: thunderbird security update
An update for thunderbird is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
WordPress WP Mail SMTP plugin <= 4.0.1 - Authenticated (Admin+) SMTP Password Exposure vulnerability
Authenticated Admin+ SMTP Password Exposure vulnerability discovered by Guus Verbeek in WordPress Plugin WP Mail SMTP by WPForms versions = 4.0.1...
Important: Red Hat Security Advisory: thunderbird security update
An update for thunderbird is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...