SOGo 安全漏洞

SOGo is a very fast and extensible modern collaboration suite. It provides calendaring, address book management and a full-featured Webmail client as well as resource sharing and permission handling. A security vulnerability exists in Alinto SOGo 5.10.0 and prior versions that originates from...

CVE-2024-34462

Alinto SOGo through 5.10.0 allows XSS during attachment preview...

CVE-2024-34462

Alinto SOGo through 5.10.0 allows XSS during attachment preview...

CVE-2024-34462

Alinto SOGo through 5.10.0 allows XSS during attachment preview...

CVE-2024-34462

Alinto SOGo through 5.10.0 allows XSS during attachment preview...

CVE-2024-34462

CVE-2024-34462 affects Alinto SOGo up to version 5.10.0, enabling Cross-Site Scripting during attachment previews. The incident is documented across multiple feeds (NVD, OSV, Debian LTS DLA-4434) with Debian noting a patch in 5.0.1-4+deb11u3 for the Bullseye release. In practice, affected deploym...

PT-2024-18440 · WordPress · Arforms Form Builder

Name of the Vulnerable Software and Affected Versions: ARForms Form Builder plugin for WordPress versions up to, and including, 1.6.4 Description: The issue is related to a missing capability check on the arflite remove preview data function, allowing authenticated attackers with subscriber acces...

Debian dla-3801 : emacs - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3801 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3801-1 [email protected]...

[BSA-119] Security Update for emacs

Sean Whitton uploaded new packages for emacs which fixed the following security problems: CVE-2024-30202 In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23. CVE-2024-30203 believed bogus, request submitted to MITRE to merge...

Explorer for Microsoft Teams: "System event messages are unsupported."

Challenge When exploring Teams channel messages, some messages are listed with an empty Author and Subject value. Attempting to preview one of these messages causes the following warning to be displayed: System event messages are unsupported. Cause This warning occurs because system messages cann...

Popup Anything < 2.8.1 - Missing Authorization

Description The Popup Anything – Popup for opt-ins and Lead Generation Conversions plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the popupaocrenderpopuppreview function in all versions up to, and including, 2.8.0. This makes it possible for...

SUSE-SU-2024:1317-1 Security update for emacs

This update for emacs fixes the following issues: - CVE-2024-30203: Fixed denial of service via MIME contents bsc1222053 - CVE-2024-30204: Fixed denial of service via LaTeX preview in e-mail attachments bsc1222052 - CVE-2024-30205: Fixed Org mode considering contents of remote files as trusted...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : emacs (SUSE-SU-2024:1294-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1294-1 advisory. - CVE-2024-30203: Fixed treating inline MIME contents as trusted bsc1222053 - CVE-2024-30204:...

OESA-2024-1390 emacs security update

Emacs is the extensible, customizable, self-documenting real-time display editor. At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a proje...

CVE-2024-2730

Mautic uses predictable page indices for unpublished landing pages, their content can be accessed by unauthenticated users under public preview URLs which could expose sensitive data. At the time of publication of the CVE no patch is available...

Mautic 安全漏洞

Mautic is an open source marketing automation software. The software monitors and manages websites, sends emails and manages customer resources. Mautic suffers from a security vulnerability that stems from the use of predictable page indexing for unpublished landing pages, whose content can be...

PT-2024-21804 · Mautic · Mautic

Name of the Vulnerable Software and Affected Versions: Mautic affected versions not specified Description: Mautic uses predictable page indices for unpublished landing pages, allowing their content to be accessed by unauthenticated users under public preview URLs. This could expose sensitive data...

PT-2024-4409 · Unknown · Edu-Sharing

Name of the Vulnerable Software and Affected Versions: edu-sharing versions 8.0.8-RC2, 8.1.4-RC0, 9.0.0-RC19 can be simplified to: edu-sharing versions prior to 8.0.8-RC2, 8.1.4-RC0, and 9.0.0-RC19 However, given the instruction to consolidate ranges into the most concise form and considering the...

Privacy Leakage

emacs is vulnerable to a Privacy Leakage. The vulnerability is due to LaTeX preview being enabled by default for email attachments, allows attackers can automatically generating LaTeX previews for email attachments, potentially disclosing sensitive information to unintended recipients...

Sassy Social Share < 3.3.61 - Contributor+ Stored XSS

Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks As a contributor, put the below...