Lucene search
+L

18310 matches found

NVD
NVD
•added 2024/04/22 8:15 p.m.•25 views

CVE-2024-32399

Directory Traversal vulnerability in RaidenMAILD Mail Server v.4.9.4 and before allows a remote attacker to obtain sensitive information via the /webeditor/ component...

7.6CVSS6.1AI score0.0316EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/04/22 12:00 a.m.•40 views

CVE-2024-32399

Directory Traversal vulnerability in RaidenMAILD Mail Server v.4.9.4 and before allows a remote attacker to obtain sensitive information via the /webeditor/ component...

9.2AI score0.0316EPSS
SaveExploits1References2
osv_alsa
osv_alsa
•added 2024/04/22 12:00 a.m.•43 views

ALSA-2024:1940 Low: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.10.0. Security Fixes: Mozilla: Denial of Service using HTTP/2 CONTINUATION frames CVE-2024-3302 For more details about the security issues, including the impact, a CVSS score,...

3.7CVSS7.4AI score0.00766EPSS
SaveExploits0References18
CNNVD
CNNVD
•added 2024/04/22 12:00 a.m.•18 views

RaidenMAILD Mail Server security vulnerabilities

RaidenMAILD Mail Server is an easy-to-use SMTP/POP3/IMAP4/WebMail mail server from RaidenMAILD. A security vulnerability exists in RaidenMAILD Mail Server v.4.9.4 and earlier versions, which stems from a directory traversal vulnerability. The vulnerability can be exploited to obtain sensitive...

7.6CVSS6.4AI score0.0316EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/04/22 12:00 a.m.•20 views

PT-2024-24547 · Unknown · Raiden Maild Mail Server

Name of the Vulnerable Software and Affected Versions: RaidenMAILD Mail Server versions 4.9.4 and before Description: The issue allows a remote attacker to obtain sensitive information via the "/webeditor/" component. This is a Directory Traversal vulnerability, which can be exploited to access...

7.6CVSS9.3AI score0.0316EPSS
SaveExploits1References4
CVE
CVE
•added 2024/04/22 12:00 a.m.•160 views

CVE-2024-32399

A Directory Traversal vulnerability exists in RaidenMAILD Mail Server version 4.9.4 and before . The flaw is located in the /webeditor/ component, allowing a remote attacker to traverse directories to access and obtain sensitive information from the mail server. Practical proof-of-concept example...

7.6CVSS6.3AI score0.0316EPSS
SaveExploits1References2
osv_alsa
osv_alsa
•added 2024/04/22 12:00 a.m.•30 views

ALSA-2024:1939 Low: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.10.0. Security Fixes: Mozilla: Denial of Service using HTTP/2 CONTINUATION frames CVE-2024-3302 For more details about the security issues, including the impact, a CVSS score,...

3.7CVSS7.4AI score0.00854EPSS
SaveExploits2References18
Vulnrichment
Vulnrichment
•added 2024/04/22 12:00 a.m.•25 views

CVE-2024-32399

Directory Traversal vulnerability in RaidenMAILD Mail Server v.4.9.4 and before allows a remote attacker to obtain sensitive information via the /webeditor/ component...

6.4AI score0.0316EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/22 12:00 a.m.•10 views

CVE-2024-32399: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in RaidenMAILD Mail Server v.4.9.4 and before allows a remote attacker to obtain sensitive information via the /webeditor/ component...

7.6CVSS6AI score0.0316EPSS
SaveExploits1References2
HackRead
HackRead
•added 2024/04/19 2:04 p.m.•31 views

Tuta Mail (Tutanota) Accuses Google of Censoring Its Search Results

By Deeba Ahmed Shadowboxing in Search Results: Tuta Mail De-ranked and Disappearing on Google! This is a post from HackRead.com Read the original post: Tuta Mail Tutanota Accuses Google of Censoring Its Search Results...

7.3AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2024/04/17 6:25 p.m.•6 views

net.micedre.keycloak:keycloak-mail-whitelisting (1.5), org.keycloak:keycloak-dependencies-server-all (19.0.0) +15 more potentially affected by CVE-2023-0657 via org.keycloak:keycloak-services (19.0.0)

org.keycloak:keycloak-services MAVEN version 19.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - net.micedre.keycloak:keycloak-mail-whitelisting 1.5 - org.keycloak:keycloak-dependencies-server-al...

3.4CVSS0.00292EPSS
SaveExploits0
WPVulnDB
WPVulnDB
•added 2024/04/17 12:00 a.m.•19 views

WP Mail Catcher < 2.1.7 - Cross-Site Request Forgery

Description The WP Mail Catcher plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.6. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to perform unauthorized actions...

4.3CVSS6.7AI score0.00212EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/04/15 9:15 a.m.•30 views

CVE-2024-32099

Cross-Site Request Forgery CSRF vulnerability in James Ward WP Mail Catcher.This issue affects WP Mail Catcher: from n/a through 2.1.6...

4.3CVSS4.6AI score0.00212EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/15 8:54 a.m.•34 views

CVE-2024-32099 WordPress WP Mail Catcher plugin <= 2.1.6 - Cross Site Request Forgery vulnerability

Cross-Site Request Forgery CSRF vulnerability in James Ward WP Mail Catcher.This issue affects WP Mail Catcher: from n/a through 2.1.6...

4.3CVSS5AI score0.00212EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/15 8:54 a.m.•25 views

CVE-2024-32099 WordPress WP Mail Catcher plugin <= 2.1.6 - Cross Site Request Forgery vulnerability

Cross-Site Request Forgery CSRF vulnerability in James Ward WP Mail Catcher.This issue affects WP Mail Catcher: from n/a through 2.1.6...

4.3CVSS5.1AI score0.00212EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/15 8:54 a.m.•85 views

CVE-2024-32099

CVE-2024-32099 is a Cross-Site Request Forgery (CSRF) vulnerability in the WP Mail Catcher WordPress plugin, affecting WP Mail Catcher versions up to 2.1.6. The vulnerability is documented with a CVSS v3.1 base score of 4.3 (Medium) and vectors including Network attack, Low attack complexity, No ...

4.3CVSS5.1AI score0.00212EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/04/15 12:00 a.m.•29 views

WordPress Plugin: Mail logging vulnerability due to cross-site request forgery

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

4.3CVSS6.4AI score0.00212EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/15 12:00 a.m.•24 views

PT-2024-24404 · Unknown · Wp Mail Catcher

Name of the Vulnerable Software and Affected Versions: WP Mail Catcher versions through 2.1.6 Description: A Cross-Site Request Forgery CSRF issue affects James Ward WP Mail Catcher. This allows an attacker to perform unintended actions on a user's account. Recommendations: For WP Mail Catcher...

4.3CVSS6.9AI score0.00212EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/15 12:00 a.m.•8 views

CVE-2024-32099: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in James Ward WP Mail Catcher.This issue affects WP Mail Catcher: from n/a through 2.1.6...

4.3CVSS5.8AI score0.00212EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/04/11 10:21 a.m.•18 views

WordPress WP Mail Catcher plugin <= 2.1.6 - Cross Site Request Forgery vulnerability

Cross Site Request Forgery vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin WP Mail Catcher versions = 2.1.6...

4.3CVSS7AI score0.00212EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder