CVE-2026-110249 Denial-of-service in the Exchange email component

A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP response containing an element with enough attributes to keep Thunderbird's main thread CPU-bound for seconds to hours. This vulnerability was fixed in Thunderbird 158 and Thunderbird 153.5...

CVE-2026-110249

Mozilla Thunderbird is affected by a Denial-of-Service (DoS) vulnerability in its Exchange email component . A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP response containing an element with sufficient attributes to keep Thunderbird's main threa...

CVE-2026-110249 Denial-of-service in the Exchange email component

A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP response containing an element with enough attributes to keep Thunderbird's main thread CPU-bound for seconds to hours. This vulnerability was fixed in Thunderbird 158 and Thunderbird 153.5...

CVE-2025-66955

Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" parameter in the downloadAttachment and downloadAttachmentFromPath API calls...

CVE-2025-66955

Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" parameter in the downloadAttachment and downloadAttachmentFromPath API calls...

CVE-2025-66955

Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" parameter in the downloadAttachment and downloadAttachmentFromPath API calls...

CVE-2025-66956

Insecure Access Control in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote attackers to access and execute attachments via a computable URL...

CouchAuth security vulnerability

CouchAuth is an authentication API developed by Perfood. Version 0.26.0 of CouchAuth contains a security vulnerability. This vulnerability stems from a potential host header injection in the email component, which could lead to the acquisition of reset tokens and account takeover attacks...

CVE-2025-67823

A vulnerability in the Multimedia Email component of Mitel MiContact Center Business through 10.2.0.10 and Mitel CX through 1.1.0.1 could allow an unauthenticated attacker to conduct a Cross-Site Scripting XSS attack due to insufficient input validation. A successful exploit requires user...

CVE-2025-67823

A vulnerability in the Multimedia Email component of Mitel MiContact Center Business (versions through 10.2.0.10) and Mitel CX (versions through 1.1.0.1) allows an unauthenticated attacker to perform a Cross-Site Scripting (XSS) attack. The root cause is insufficient input validation . A successf...

EUVD-2019-12418

Malware in sbrugna...

CVE-2019-2980

Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications component: eMail. Supported versions that are affected are 12.0.2 and 12.0.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

VMware Workspace ONE Boxer XSS

The vulnerability of the email management application, calendar, and contact list component in VMware Workspace ONE Boxer is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

PT-2020-16799

Name of the Vulnerable Software and Affected Versions xdg-utils versions 1.1.0-rc1 and newer Description A flaw was found in the xdg-email component. When handling mailto: URIs, xdg-email allows attachments to be discreetly added via the URI when being passed to Thunderbird. An attacker could...

Unspecified Vulnerability in Google Android (CNVD-2021-30156)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components.VPN is one of the VPN Virtual Private Network components. VPN is a VPN Virtual Private Network component, Email is an email component, and...

Unspecified Vulnerability in Google Android (CNVD-2021-30161)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA.Framework is an Android framework component.System is a system component.Broadcom Bluetooth is a Bluetooth component.Wi-Fi is a wireless Internet component.USB driver is a Universal Serial Bus USB...

Google Android Denial of Service Vulnerability (CNVD-2021-30160)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA.Framework is an Android framework component.System is a system component.Broadcom Bluetooth is a Bluetooth component.Wi-Fi is a wireless Internet component.USB driver is a Universal Serial Bus USB...

Oracle FLEXCUBE Direct Banking Email Unauthorized Access

The vulnerability of the eMail component of the Oracle FLEXCUBE Direct Banking system relates to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information using the HTTP protoc...

PT-2019-3671

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Direct Banking versions 12.0.2 through 12.0.3 Description The issue is related to a lack of protection for service data in the eMail component of Oracle FLEXCUBE Direct Banking. This allows a low-privileged attacker with networ...

CVE-2019-2779

Vulnerability in the Siebel Core - Common Components component of Oracle Siebel CRM subcomponent: Email. Supported versions that are affected are 19.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel Core - Common...