Lucene search
+L

72 matches found

OpenVAS
OpenVAS
•added 2019/05/07 12:00 a.m.•90 views

Fedora Update for php-PHPMailer FEDORA-2018-a2e9bd6eae

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS6.7AI score0.02229EPSS
SaveExploits0References2
Fedora
Fedora
•added 2018/11/27 5:13 p.m.•49 views

[SECURITY] Fedora 28 Update: php-PHPMailer-5.2.27-1.fc28

Full Featured Email Transfer Class for PHP. PHPMailer features: Supports emails digitally signed with S/MIME encryption! Supports emails with multiple TOs, CCs, BCCs and REPLY-TOs Works on any platform. Supports Text & HTML emails. Embedded image support. Multipart/alternative emails for mail...

8.8CVSS6.7AI score0.02229EPSS
SaveExploits0
Fedora
Fedora
•added 2018/11/27 3:13 a.m.•52 views

[SECURITY] Fedora 27 Update: php-PHPMailer-5.2.27-1.fc27

Full Featured Email Transfer Class for PHP. PHPMailer features: Supports emails digitally signed with S/MIME encryption! Supports emails with multiple TOs, CCs, BCCs and REPLY-TOs Works on any platform. Supports Text & HTML emails. Embedded image support. Multipart/alternative emails for mail...

8.8CVSS6.7AI score0.02229EPSS
SaveExploits0
Amazon
Amazon
•added 2017/11/02 12:00 a.m.•64 views

Medium: golang

Issue Overview: Arbitrary code execution during go get or go get -d: Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. Using custom domains, it is possible to arrange things so that example.com/pkg1 points to a Subversion repository but example.com/pkg1/pkg2 points ...

9.8CVSS8AI score0.08944EPSS
SaveExploits0
Fedora
Fedora
•added 2017/08/04 4:54 p.m.•51 views

[SECURITY] Fedora 26 Update: php-PHPMailer-5.2.24-1.fc26

Full Featured Email Transfer Class for PHP. PHPMailer features: Supports emails digitally signed with S/MIME encryption! Supports emails with multiple TOs, CCs, BCCs and REPLY-TOs Works on any platform. Supports Text & HTML emails. Embedded image support. Multipart/alternative emails for mail...

6.1CVSS6.5AI score0.024EPSS
SaveExploits1
Fedora
Fedora
•added 2017/07/28 8:51 p.m.•73 views

[SECURITY] Fedora 25 Update: php-PHPMailer-5.2.24-1.fc25

Full Featured Email Transfer Class for PHP. PHPMailer features: Supports emails digitally signed with S/MIME encryption! Supports emails with multiple TOs, CCs, BCCs and REPLY-TOs Works on any platform. Supports Text & HTML emails. Embedded image support. Multipart/alternative emails for mail...

6.1CVSS6.5AI score0.024EPSS
SaveExploits1
CNVD
CNVD
•added 2017/06/30 12:00 a.m.•5 views

Drupal SMTP Authentication Support Module Information Disclosure Vulnerability

Drupal is an open source content management framework CMF written in the PHP language, which consists of a content management system CMS and PHP development framework Framework together. An information disclosure vulnerability exists in the Drupal SMTP Authentication Support module. An attacker c...

6.2AI score
SaveExploits0References1
Fedora
Fedora
•added 2016/02/11 1:24 p.m.•40 views

[SECURITY] Fedora 23 Update: php-PHPMailer-5.2.14-1.fc23

Full Featured Email Transfer Class for PHP. PHPMailer features: Supports emails digitally signed with S/MIME encryption! Supports emails with multiple TOs, CCs, BCCs and REPLY-TOs Works on any platform. Supports Text & HTML emails. Embedded image support. Multipart/alternative emails for mail...

5CVSS9.4AI score0.01988EPSS
SaveExploits0
OSV
OSV
•added 2014/05/23 2:55 p.m.•16 views

CVE-2013-4223

The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows local users to obtain SMTP authentication credentials by reading the file...

6.3AI score
SaveExploits0References6
Prion
Prion
•added 2014/05/23 2:55 p.m.•29 views

Authentication flaw

The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows local users to obtain SMTP authentication credentials by reading the file...

5CVSS6.9AI score0.01335EPSS
SaveExploits0References6Affected Software1
UbuntuCve
UbuntuCve
•added 2014/05/23 2:55 p.m.•35 views

CVE-2013-4223

The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows local users to obtain SMTP authentication credentials by reading the file...

5CVSS5.9AI score0.01335EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2014/05/23 2:00 p.m.•45 views

CVE-2013-4223

The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows local users to obtain SMTP authentication credentials by reading the file...

5CVSS6.3AI score0.01335EPSS
SaveExploits0
CVE
CVE
•added 2014/05/23 2:00 p.m.•57 views

CVE-2013-4223

The CVE affects the Gentoo Nullmailer package prior to version 1.11-r2. The root cause is world-readable permissions on /etc/nullmailer/remotes, which allows local users to read SMTP authentication credentials stored in that file. This is documented consistently across NVD, OSV, Ubuntu, Debian, a...

5CVSS6.6AI score0.01335EPSS
SaveExploits0References6Affected Software1
Positive Technologies
Positive Technologies
•added 2014/05/23 12:00 a.m.•3 views

PT-2014-2765

Name of the Vulnerable Software and Affected Versions Nullmailer versions prior to 1.11-r2 Description The issue allows local users to obtain SMTP authentication credentials by reading the /etc/nullmailer/remotes file due to world-readable permissions. Recommendations For versions prior to 1.11-r...

5CVSS0.01335EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/05/23 12:00 a.m.•6 views

CVE-2013-4223: Undefined Security Weakness

The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows local users to obtain SMTP authentication credentials by reading the file...

5CVSS5.8AI score0.01335EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2014/03/25 7:42 p.m.•46 views

[EMS] E-mail Spoofer

E-mail Spoofer is a tool designed for penetration testers who need to send phishing e-mails. It allows to send mails to a single recipient or a list, it supports plain text/html email formats, attachments, templates and more… Features Support for Plain text and HTML E-mail Templates Spoofing Send...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2012/08/01 12:00 a.m.•35 views

Scientific Linux Security Update : postfix on SL4.x, SL5.x i386/x86_64

Postfix is a Mail Transport Agent MTA, supporting LDAP, SMTP AUTH SASL, and TLS. A heap-based buffer over-read flaw was found in the way Postfix performed SASL handlers management for SMTP sessions, when Cyrus SASL authentication was enabled. A remote attacker could use this flaw to cause the...

6.8CVSS8.2AI score0.21481EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2011/06/02 12:00 a.m.•43 views

CentOS 4 / 5 : postfix (CESA-2011:0843)

Updated postfix packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

6.8CVSS8AI score0.21481EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2011/06/01 12:00 a.m.•44 views

RHEL 4 / 5 / 6 : postfix (RHSA-2011:0843)

The remote Redhat Enterprise Linux 4 / 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0843 advisory. Postfix is a Mail Transport Agent MTA, supporting LDAP, SMTP AUTH SASL, and TLS. A heap-based buffer over-read flaw was found in the way...

6.8CVSS8.1AI score0.21481EPSS
SaveExploits1References5
Packet Storm
Packet Storm
•added 2008/09/03 12:00 a.m.•51 views

plesk-auth.txt

Hello, the reported vulnerability allows logins to mail and probably other services protected by plesk authentication modules on at least the current Plesk 8.6.0 Unix/Linux and could eg. be used for relaying spam through gained smtp auth priviledges. Only systems which allow short mail login name...

7.4AI score
SaveExploits0
Rows per page
Query Builder