CVE-2023-4599

The Slimstat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'eebmailto' shortcode in versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers...

CVE-2020-24904

An issue was discovered in attach parameter in GNOME Gmail version 2.5.4, allows remote attackers to gain sensitive information via crafted "mailto" link...

DEBIAN-CVE-2020-24904

An issue was discovered in attach parameter in GNOME Gmail version 2.5.4, allows remote attackers to gain sensitive information via crafted "mailto" link...

CVE-2020-24904

An issue was discovered in attach parameter in GNOME Gmail version 2.5.4, allows remote attackers to gain sensitive information via crafted "mailto" link...

Information disclosure

An issue was discovered in attach parameter in GNOME Gmail version 2.5.4, allows remote attackers to gain sensitive information via crafted "mailto" link...

UBUNTU-CVE-2020-24904

An issue was discovered in attach parameter in GNOME Gmail version 2.5.4, allows remote attackers to gain sensitive information via crafted "mailto" link...

GNOME Gmail Security Vulnerability

GNOME Gmail is a Linux desktop mailer by the individual developer David Steele. A security vulnerability exists in GNOME Gmail version 2.5.4, which stems from a problem found in the attach parameter that allows remote attackers to obtain sensitive information via a crafted mailto link...

CVE-2020-24904

An issue was discovered in attach parameter in GNOME Gmail version 2.5.4, allows remote attackers to gain sensitive information via crafted "mailto" link...

CVE-2020-24904

An issue was discovered in attach parameter in GNOME Gmail version 2.5.4, allows remote attackers to gain sensitive information via crafted "mailto" link...

CVE-2020-24904: Undefined Security Weakness

An issue was discovered in attach parameter in GNOME Gmail version 2.5.4, allows remote attackers to gain sensitive information via crafted "mailto" link...

CVE-2020-24904

CVE-2020-24904 relates to GNOME Gmail 2.5.4 where an issue in the attach parameter allows remote attackers to glean sensitive information through crafted "mailto" links. The connected documents specify the affected software and the underlying cause (attach parameter mishandling in GNOME Gmail) wi...

PT-2023-11734

Name of the Vulnerable Software and Affected Versions GNOME Gmail version 2.5.4 Description An issue was discovered in the attach parameter, allowing remote attackers to gain sensitive information via crafted "mailto" links. Recommendations For GNOME Gmail version 2.5.4, consider avoiding the use...

CVE-2020-24904

Removed by vendor...

Authorization Bypass

firefox is vulnerable to Authorization Bypasses. An attacker could exploit this vulnerability by creating a malicious website that uses a mailto URL in a full-screen notification. When the user clicks on the notification, the mailto URL will be opened in an external program, such as their email...

CVE-2023-4053: Improper Link Resolution Before File Access

A website could have obscured the full screen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 116, Firefox ESR 115.2, and Thunderbird 115.2...

Mozilla: Fullscreen notification obscured

The Mozilla Foundation Security Advisory describes this flaw as: A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks...

Mozilla: Fullscreen notification obscured

The Mozilla Foundation Security Advisory describes this flaw as: A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks...

Mozilla: Fullscreen notification obscured

The Mozilla Foundation Security Advisory describes this flaw as: A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks...

Mozilla: Fullscreen notification obscured

The Mozilla Foundation Security Advisory describes this flaw as: A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks...

CVE-2023-37207

A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13...