[20181004] - Core - ACL Violation in com_users for the admin verification

In case that an attacker gets access to the mail account of an user who can approve admin verifications in the registration process he can activate himself...

CVE-2017-17926

PHP Scripts Mall Professional Service Script has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address...

CVE-2017-13860

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. The issue involves the "Mail Drafts" component. It allows man-in-the-middle attackers to read e-mail content by leveraging mishandling of S/MIME credential encryption...

CVE-2017-13871

An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Mail" component. It allows remote attackers to read cleartext e-mail content for which S/MIME encryption was intended by leveraging the lack of installation of an S/MIME certificate by the...

CVE-2017-13874

An issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue involves the "Mail" component. It might allow remote attackers to bypass an intended encryption protection mechanism by leveraging incorrect S/MIME certificate selection...

CVE-2017-13874

An issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue involves the "Mail" component. It might allow remote attackers to bypass an intended encryption protection mechanism by leveraging incorrect S/MIME certificate selection...

CVE-2017-13860

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. The issue involves the "Mail Drafts" component. It allows man-in-the-middle attackers to read e-mail content by leveraging mishandling of S/MIME credential encryption...

CVE-2017-13871

An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Mail" component. It allows remote attackers to read cleartext e-mail content for which S/MIME encryption was intended by leveraging the lack of installation of an S/MIME certificate by the...

Code injection

An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Mail" component. It allows remote attackers to read cleartext e-mail content for which S/MIME encryption was intended by leveraging the lack of installation of an S/MIME certificate by the...

Code injection

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. The issue involves the "Mail Drafts" component. It allows man-in-the-middle attackers to read e-mail content by leveraging mishandling of S/MIME credential encryption...

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue involves the "Mail" component. It might allow remote attackers to bypass an intended encryption protection mechanism by leveraging incorrect S/MIME certificate selection...

CVE-2017-7152

CVE-2017-7152 affects the Mail Message Framework in iOS 11.2 and earlier. Root cause: an inconsistent UI state allowed address bar spoofing when visiting a malicious site. Impact: an attacker could spoof the address bar. Remediation: Apple released a fix with iOS 11.2 (described in Apple security...

CVE-2017-13871

CVE-2017-13871 affects macOS Mail prior to the macOS 10.13.2 security updates. The issue allows a remote attacker to read cleartext email content that S/MIME would normally protect, by exploiting the recipient’s missing S/MIME certificate installation. Affected software is macOS High Sierra (and ...

CVE-2017-13871

An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Mail" component. It allows remote attackers to read cleartext e-mail content for which S/MIME encryption was intended by leveraging the lack of installation of an S/MIME certificate by the...

CVE-2017-7152

An issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue involves the "Mail Message Framework" component. It allows remote attackers to spoof the address bar via a crafted web site...

CVE-2017-13874

An issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue involves the "Mail" component. It might allow remote attackers to bypass an intended encryption protection mechanism by leveraging incorrect S/MIME certificate selection...

CVE-2017-13874

CVE-2017-13874 affects iOS before 11.2 (Mail). The issue arises from incorrect S/MIME certificate selection, which may allow a remote attacker to bypass the intended encryption protection mechanism. Technical details show the vulnerability lies in the Mail component’s handling of S/MIME certifica...

CVE-2017-13860

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. The issue involves the "Mail Drafts" component. It allows man-in-the-middle attackers to read e-mail content by leveraging mishandling of S/MIME credential encryption...

Code-Crafters Ability Mail Server Cross-Site Scripting Vulnerability

Code-Crafters Ability Mail Server is a set of mail server software from Code-Crafters Software UK. The software provides SMTP, POP3, WebMail and other common functions, and supports remote management, virus protection, content filtering and so on. A cross-site scripting vulnerability exists in...

Debian DSA-4069-1 : otrs2 - security update

Francesco Sirocco discovered a flaw in otrs2, the Open Ticket Request System, which could result in session information disclosure when cookie support is disabled. A remote attacker can take advantage of this flaw to take over an agent's session if the agent is tricked into clicking a link in a...