6631 matches found
CVE-2017-18603: Improper Neutralization of Input During Web Page Generation
The postman-smtp plugin through 2017-10-04 for WordPress has XSS via the wp-admin/tools.php?page=postmanemaillog page parameter...
openSUSE Security Update : exim (openSUSE-2019-2093)
exim was updated to fix a security issue : - CVE-2019-15846: Fixed a buffer overflow in SMTP Delivery process where a remote attacker could execute code with root privileges by sending crafted SNI data boo1149182. C Tenable Network Security, Inc. The descriptive text and package checks in this...
Security update for exim (important)
openSUSE Security Update: Security update for exim Announcement ID: openSUSE-SU-2019:2093-1 Rating: important References: 1149182 Cross-References: CVE-2019-15846 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: exim wa...
smtp.elital.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-956592 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Fedora Update for nginx FEDORA-2019-7a0b45fdc4
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
curl:curl_fuzzer_smtp: Use-of-uninitialized-value in smtp_state_ehlo_resp
Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5634440956477440 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzersmtp Job Type: libfuzzermsancurl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
CVE-2019-12753: Undefined Security Weakness
An information disclosure vulnerability in Symantec Reporter web UI 10.3 prior to 10.3.2.5 allows a malicious authenticated administrator user to obtain passwords for external SMTP, FTP, FTPS, LDAP, and Cloud Log Download servers that they might not otherwise be authorized to access. The maliciou...
CVE-2019-14305
Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for Wi-Fi, mDNS, POP3, SMTP, and notification alerts, which allow an attacker to cause a denial of service or code execution via crafted requests to the web server. Affected firmware versions depend on the print...
CVE-2019-14305
CVE-2019-14305 affects Ricoh printers (notably SP C250/DN/C252 family and SP C250SF/C252SF models). The underlying issue is buffer overflows in the HTTP parameter handling for Wi‑Fi, mDNS, POP3, SMTP, and alert processing in the web server, allowing a remote attacker to cause denial of service or...
curl:curl_fuzzer_smtp: Negative-size-param in fuzz_tlv_to_string
Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=6288244651589632 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzersmtp Job Type: libfuzzerasani386curl Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...
Fedora Update for squirrelmail FEDORA-2019-1a87523729
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 30 Update: nginx-1.16.1-1.fc30
Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and IMAP protocols, with a strong focus on high concurrency, performance and low memory usage...
WordPress bws-smtp plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. bws-smtp is a plugin used in it to configure an SMTP server to receive e-mail. A cross-site scripting vulnerability exists ...
[SECURITY] Fedora 29 Update: squirrelmail-1.4.23-1.fc29.20190710
SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no JavaScript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...
CVE-2017-18518
The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues...
CVE-2017-18518
The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues...
Cross site scripting
The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues...
CVE-2017-18518
The CVE-2017-18518 entry concerns the WordPress plugin bws-smtp (BestWebSoft) before version 1.1.0 , which has multiple XSS vulnerabilities. The connected nuclei template confirms the vulnerability is a cross-site scripting issue affecting that plugin. The impact stated in the connected document ...
