15471 matches found
CVE-2019-5965
The vulnerability CVE-2019-5965 is an Open Redirect in Joruri Mail ≤2.1.4 (CWE-601). A remote attacker can redirect users to arbitrary sites, enabling phishing via crafted pages. Affected product: Joruri Mail 2.1.4 and earlier. Root cause: improper handling of redirects. Impact: user phishing ris...
CVE-2019-5966
Joruri Mail 2.1.4 and earlier does not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and alter/disclose the information via unspecified vectors...
CVE-2019-5966
CVE-2019-5966 affects Joruri Mail 2.1.4 and earlier. The issue is due to improper session management, enabling a remote attacker to impersonate an arbitrary user and alter/disclose information. The Red Hat/NVD entries confirm the impact; affected versions are 2.1.4 and earlier. Remediation advise...
CVE-2019-5965
Open redirect vulnerability in Joruri Mail 2.1.4 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...
WordPress Simple Mail Address Encoder plugin <= 1.6.1 - Reflected Authenticated Cross-Site Scripting (XSS) vulnerability
Reflected Authenticated Cross-Site Scripting XSS vulnerability found in WordPress Simple Mail Address Encoder plugin versions = 1.6.1. Solution Update the WordPress Simple Mail Address Encoder plugin to the latest available version at least 1.7...
CVE-2018-14862
Incorrect access control in the mail templating system in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated internal users to delete arbitrary menuitems via a crafted RPC request...
CVE-2018-14862
Incorrect access control in the mail templating system in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated internal users to delete arbitrary menuitems via a crafted RPC request...
Simple Mail Address Encoder <= 1.6.1 - Reflected Authenticated XSS
Reflected XSS in the base64 encoded fwurl parameter when the plugin has been used for 30 days and shows a donation notice https:///wp-admin/options-general.php?page=smae&smaeaction=remind&fwurl=Iyc7YWxlcnQoL1hTUy8pOy8v...
Simple Mail Address Encoder <= 1.6.1 - Reflected Authenticated XSS
Reflected XSS in the base64 encoded fwurl parameter when the plugin has been used for 30 days and shows a donation notice PoC https:///wp-admin/options-general.php?page=smae=remind=Iyc7YWxlcnQoL1hTUy8pOy8v...
[SECURITY] Fedora 29 Update: glpi-9.3.4-2.fc29
GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...
USN-4045-1: Thunderbird vulnerabilities
A type confusion bug was discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could exploit this by causing a denial of service, or executing arbirary code. CVE-2019-11707 It was discovered that a sandboxed child process...
CVE-2019-4296
IBM Robotic Process Automation with Automation Anywhere 11 information disclosure could allow a local user to obtain e-mail contents from the client debug log file. IBM X-Force ID: 160759...
CVE-2019-12970
CVE-2019-12970 is a disclosed XSS in SquirrelMail prior to updates addressing versions up to 1.4.22 and 1.5.x through 1.5.2. Root cause: improper handling of RCDATA/RAWTEXT in the sanitization mechanism allows bypass, enabling malicious script injection from HTML e-mails when assets such as NOEMB...
[SECURITY] Fedora 30 Update: glpi-9.4.3-1.fc30
GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...
Important: Red Hat Security Advisory: thunderbird security update
An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
Mail Quota Restriction Bypass
Moodle is vulnerable to mail quota restriction bypass. The attack is possible because it does not properly check the size of users' private file uploaded via email against the maximum mail quota...
SQL Injection Vulnerability in ewomail Mail System
Ltd. has been engaged in e-mail technology solutions and development, to provide enterprises with secure and stable mail server software and technical support. SQL injection vulnerability exists in the ewomail mail system, which can be exploited by attackers to obtain sensitive database informati...
CVE-2019-11581 - Template injection in various resources
There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. For this issue to be exploitable at least one of the following conditions must be met: an SMTP server has been configured in Jira and the Contact...
Logic Flaw Vulnerability in JEEWX Jiewei Mail Manager System
JEEWX Jiewei housekeeper system referred to as "Jiewei", is a JAVA-based implementation of the WeChat housekeeper system. A logic flaw exists in the JEEWX system. An attacker can view the source code and obtain sensitive information...