18281 matches found
USN-6881-1 exim4 vulnerability
It was discovered that Exim did not enforce STARTTLS sync point on client side. An attacker could possibly use this issue to perform response injection during MTA SMTP sending...
USN-6881-1: Exim vulnerability
It was discovered that Exim did not enforce STARTTLS sync point on client side. An attacker could possibly use this issue to perform response injection during MTA SMTP sending...
Parameter Injection
zend-mail is vulnerable to Parameter Injection. The vulnerability is due to unsanitized additional quote characters within an address in the file Sendmail.php, which allows an attacker to inject arbitrary parameters to the system sendmail program...
Go ParseAddressList Spoofing
The vulnerability of the ParseAddressList function in the net/mail package in the Go programming language is related to insufficient checking of the names displayed by this function. Exploitation of this vulnerability could allow a malicious actor to perform spear-phishing attacks by sending...
golang: net/mail: comments in display names are incorrectly handled
A flaw was found in Go's net/mail standard library package. The ParseAddressList function incorrectly handles comments text within parentheses within display names. Since this is a misalignment with conforming address parsers, it can result in different trust decisions made by programs using...
MAL-2024-7015 Malicious code in royal-mail_scraper (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in royal-mail_api (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in alerty_plugin-mail (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6554 Malicious code in alerty_plugin-mail (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4539 Malicious code in Mail (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Mail (NuGet)
--- -= Per source details. Do not edit below this line.=-...
[SECURITY] Fedora 39 Update: thunderbird-115.12.1-1.fc39
Mozilla Thunderbird is a standalone mail and newsgroup client...
EulerOS 2.0 SP11 : emacs (EulerOS-SA-2024-1830)
According to the versions of the emacs package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.CVE-2024-30205 In Emacs before...
CVE-2024-30848
Cross-site scripting XSS vulnerability in SilverSky E-mail service version 5.0.3126 allows remote attackers to inject arbitrary web script or HTML via the version parameter...
CVE-2024-30848: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in SilverSky E-mail service version 5.0.3126 allows remote attackers to inject arbitrary web script or HTML via the version parameter...
CVE-2024-30848
The SilverSky E-mail service version 5.0.3126 is vulnerable to a Cross-site scripting (XSS) flaw. This issue allows remote attackers to inject arbitrary web scripts or HTML through the version parameter , which could potentially lead to unauthorized actions on the affected system. To mitigate thi...
CVE-2024-30848
Cross-site scripting XSS vulnerability in SilverSky E-mail service version 5.0.3126 allows remote attackers to inject arbitrary web script or HTML via the version parameter...
CVE-2024-30848
Cross-site scripting XSS vulnerability in SilverSky E-mail service version 5.0.3126 allows remote attackers to inject arbitrary web script or HTML via the version parameter...
ALSA-2024:4036 Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.12.1. Security Fixes: thunderbird: Use-after-free in networking CVE-2024-5702 thunderbird: Use-after-free in JavaScript object transplant CVE-2024-5688 thunderbird: External protocol...