Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mutt (UTSA-2023-002883)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002883 advisory. Null pointer dereference when composing from a specially crafted draft message in Mutt 1.5.2 1.5.2 2.2.12 Tenable has extracted the preceding description block...

EUVD-2023-54714

Malicious code in bioql PyPI...

EulerOS 2.0 SP11 : mutt (EulerOS-SA-2023-3252)

According to the versions of the mutt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Null pointer dereference when viewing a specially crafted email in Mutt 1.5.2 1.5.2 1.5.2 1...

EulerOS 2.0 SP10 : mutt (EulerOS-SA-2023-3187)

According to the versions of the mutt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Null pointer dereference when viewing a specially crafted email in Mutt 1.5.2 1.5.2 1.5.2 1...

Ubuntu 23.10 : Mutt vulnerabilities (USN-6374-2)

The remote Ubuntu 23.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6374-2 advisory. USN-6374-1 fixed vulnerabilities in Mutt. This update provides the corresponding updates for Ubuntu 23.10. Tenable has extracted the preceding description...

CVE-2023-4875 Undefined Behavior for Input to API in Mutt

Null pointer dereference when composing from a specially crafted draft message in Mutt 1.5.2 2.2.12...

Mutt Code Issues Vulnerabilities

Mutt is a text-based mail client for Unix-like systems developed by Michael Elkins. A security vulnerability exists in Mutt due to a null pointer dereference when composing a specially crafted draft message...

CVE-2023-4875: Undefined Behavior for Input to API

Null pointer dereference when composing from a specially crafted draft message in Mutt 1.5.2 2.2.12...

PT-2020-15044 · Otrs +1 · Otrs Community Edition +2

Name of the Vulnerable Software and Affected Versions: OTRS Community Edition versions 6.0.24 and prior versions OTRS versions 7.0.13 and prior versions Description: The issue allows one agent to send a message in the name of another agent, without the customer being aware of the change. This is...

Mail.ru: CSRF on draft message creation in tel.mail.ru

CSRF allowed to save message draft with attacker controlled content...

CVE-2018-17302

Stored XSS exists in views/fields/wysiwyg.js in EspoCRM 5.3.6 via a /Email/view saved draft message...

CVE-2018-17302

CVE-2018-17302 corresponds to a stored XSS in EspoCRM 5.3.6. The vulnerability is in views/fields/wysiwyg.js and is exploitable via the URL fragment /#Email/view (saved draft message). The available sources consistently describe a stored XSS condition affecting EspoCRM 5.3.6; no further details o...

CVE-2018-17302: Improper Neutralization of Input During Web Page Generation

Stored XSS exists in views/fields/wysiwyg.js in EspoCRM 5.3.6 via a /Email/view saved draft message...