15460 matches found
DEBIAN-CVE-2019-18928
Cyrus IMAP 2.5.x before 2.5.14 and 3.x before 3.0.12 allows privilege escalation because an HTTP request may be interpreted in the authentication context of an unrelated previous request that arrived over the same connection...
CVE-2019-18938
eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the E-Mail AddOn through 1.6.8.c installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the save.cgi script for payload upload and the testtcl.cgi script for its execution...
Multiple Symantec Products CVE-2019-12759 Local Privilege Escalation Vulnerability
Description Multiple Symantec Products are prone to an local privilege escalation vulnerability. A local attacker can leverage this issue to gain elevated privileges. The following products and versions are affected: Symantec Endpoint Protection Manager SEPM prior to versions 14.2 RU2 Symantec Ma...
Starbucks: Bulgaria - Subdomain takeover of mail.starbucks.bg
nukedx discovered that the mail.starbucks.bg domain was pointing to a mail service from icn.bg and confirmed that icn.bg did not host this domain. nukedx successfully claimed the subdomain from icn.bg, configured login credentials through the web panel and setup a valid email server. nukedx then...
CVE-2019-12720
AUO SunVeillance Monitoring System before v1.1.9e is vulnerable to mvcsendmail.aspx MailAdd parameter SQL Injection. An Attacker can carry a SQL Injection payload to the server, allowing the attacker to read privileged data. This also affects the picturemanagemvc.aspx plantno parameter, the...
CVE-2019-18849
In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorizedkeys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup...
Huge Data Leak Doxes Members of Notorious Neo-Nazi Forum
Apple Mail encryption, Ring doorbell Wi-Fi, and more of the week's top security news...
[SECURITY] Fedora 31 Update: thunderbird-68.2.0-1.fc31
Mozilla Thunderbird is a standalone mail and newsgroup client...
curl: SMTP end-of-response out-of-bounds read
An out-of-bounds read flaw was found in the way curl handled certain SMTP responses. A remote attacker could use this flaw to crash curl...
CVE-2010-3673
TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows information disclosure in the mail header of the HTML mailing API...
Information disclosure
TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows information disclosure in the mail header of the HTML mailing API...
CVE-2010-3673
TYPO3 information disclosure vulnerability (CVE-2010-3673) affects TYPO3 prior to 4.2.13, 4.3.x prior to 4.3.4, and 4.4.x prior to 4.4.1. The flaw allows information disclosure through the mail header of the HTML mailing API. The provided connected documents corroborate this description across mu...
CVE-2010-3673
TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows information disclosure in the mail header of the HTML mailing API...
CVE-2013-6365
Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions...
CVE-2013-6365
Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions...
CVE-2013-6365
Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions...
CVE-2013-6365
The CVE-2013-6365 entry relates to Horde Groupware Webmail 5.1.2 and describes a CSRF vulnerability in which requests to change permissions can be forged. Public references (e.g., Exploit-DB) describe a CSRF flaw in the Change of permissions function due to a missing or insufficient token in the ...
The vulnerability of the string_vformat component in the Exim mail server, which allows a hacker to cause a service failure or execute arbitrary code.
The vulnerability of the stringvformat component in the Exim mail server is related to buffer overflow vulnerabilities. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...
TYPO3 Direct Mail Information Disclosure Vulnerability
TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Association in Switzerland. direct Mail is an email marketing extension plugin used in it. An information disclosure vulnerability exists in TYPO3 Direct Mail 5.2.2 and prior versions. The vulnerability ste...
