15493 matches found
CVE-2018-14953
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "math xlink:href=" attack...
CVE-2018-14951
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "form action='data:text" attack...
CVE-2018-14954
The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute...
Code injection
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "form action='data:text" attack...
CVE-2018-14950
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "a xlink:href=" attack...
CVE-2018-14955
The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations animate to attribute...
UBUNTU-CVE-2018-14950
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "a xlink:href=" attack...
UBUNTU-CVE-2018-14951
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "form action='data:text" attack...
CVE-2018-14953
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "math xlink:href=" attack...
UBUNTU-CVE-2018-14954
The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute...
UBUNTU-CVE-2018-14955
The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations animate to attribute...
CVE-2018-14952
CVE-2018-14952 affects SquirrelMail up to 1.4.22 with XSS via crafted HTML payloads on the mail display page (e.g., ). Debian’s DLA-1484-1 notes fixed package squirrelmail 2:1.4.23~svn20120406-2+deb8u3 for Jessie, indicating remediation via upgrade. The connected Nessus/OpenVAS entries confirm un...
CVE-2018-14952
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "maction xlink:href=" attack...
CVE-2018-14950
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "a xlink:href=" attack...
CVE-2018-14953
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "math xlink:href=" attack...
CVE-2018-14954
The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute...
CVE-2018-14951
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "form action='data:text" attack...
CVE-2018-14955
The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations animate to attribute...
CVE-2018-14955
CVE-2018-14955 affects SquirrelMail prior to 1.4.23; the mail display page (through 1.4.22) is vulnerable to XSS via SVG animations (animate to attribute). Debian reports a fixed package at squirrelmail 2:1.4.23~svn20120406-2+deb8u3; other disclosures note unpatched status in some distros (e.g., ...
[SECURITY] Fedora 28 Update: mutt-1.10.1-1.fc28
Mutt is a small but very powerful text-based MIME mail client. Mutt is highly configurable, and is well suited to the mail power user with advanced features like key bindings, keyboard macros, mail threading, regular expression searches and a powerful pattern matching language for selecting group...