132 matches found
CVE-2016-4841
Cybozu Mailwise before 5.4.0 allows remote attackers to inject arbitrary email headers...
CVE-2016-4841
Cybozu Mailwise before 5.4.0 allows remote attackers to inject arbitrary email headers...
CVE-2016-4841
Cybozu Mailwise before 5.4.0 allows remote attackers to inject arbitrary email headers...
CVE-2016-4841
Cybozu Mailwise is affected by CVE-2016-4841: versions 5.0.0 through 5.3.2 are vulnerable to email header injection when sending messages. The root cause is improper handling of email headers, allowing a remote attacker to inject arbitrary headers via crafted requests. Public references indicate ...
PT-2017-8544
Name of the Vulnerable Software and Affected Versions Cybozu Mailwise versions prior to 5.4.0 Description The issue allows remote attackers to inject arbitrary email headers, which could lead to various security problems. Recommendations For versions prior to 5.4.0, update to version 5.4.0 or lat...
CVE-2016-4841: Improper Input Validation
Cybozu Mailwise before 5.4.0 allows remote attackers to inject arbitrary email headers...
Information disclosure
Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information...
CVE-2016-4844
Cybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks...
Code injection
Cybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks...
CVE-2016-4843
Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information...
CVE-2016-4842
Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read...
CVE-2016-4844
Cybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks...
Information disclosure
Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read...
CVE-2016-4842
Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read...
CVE-2016-4843
Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information...
CVE-2016-4843
CVE-2016-4843 affects Cybozu Mailwise prior to 5.4.0. The issue is an information-disclosure vulnerability: an unauthenticated remote attacker could obtain sensitive cookie/session information due to exposure on the CGI environment variables display page. Impact is partial confidentiality loss of...
CVE-2016-4842
Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read...
CVE-2016-4843
Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information...
CVE-2016-4844
CVE-2016-4844 : Cybozu Mailwise is vulnerable to clickjacking in versions before 5.4.0. Several sources (NVD entry for CVE-2016-4844 and OpenVAS/JS references) specify vulnerable ranges such as 5.0.0–5.3.2 and indicate that an attacker could trick authenticated users into unintended actions by lo...