DEBIAN-CVE-2020-12100

In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service resource consumption via a crafted e-mail message with deeply nested MIME parts...

CVE-2020-1444: Undefined Security Weakness

A remote code execution vulnerability exists in the way Microsoft SharePoint software parses specially crafted email messages, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'...

CVE-2020-11066

In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.17 and greater than or equal to 10.0.0 and less than 10.4.2, calling unserialize on malicious user-submitted content can lead to modification of dynamically-determined object attributes and result in triggering deletion of an arbitrary...

CVE-2020-11066

Summary of CVE-2020-11066 (TYPO3) : TYPO3 CMS versions 9.x before 9.5.17 and 10.x before 10.4.2 are affected by an insecure deserialization flaw. Calling unserialize() on malicious user-submitted content can modify dynamically-determined object attributes and may trigger deletion of an arbitrary ...

PT-2020-12816

Name of the Vulnerable Software and Affected Versions Zimbra versions 9.0 through 9.0.0 Patch 1 Description A cross-site scripting XSS issue in the Web Client of Zimbra allows a remote attacker to execute arbitrary JavaScript by crafting links in an email message or calendar invite. The attack...

The vulnerability of Cisco Email Security Appliances, related to uncontrolled resource consumption, allows attackers to trigger service failures.

The vulnerability of Cisco Email Security Appliances relates to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to trigger a service failure through a specially crafted email message...

CVE-2020-6793

When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location. This vulnerability affects Thunderbird 68.5...

CVE-2020-6792

When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents. This vulnerability affects Thunderbird 68.5...

UBUNTU-CVE-2020-6792

When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents. This vulnerability affects Thunderbird 68.5...

CVE-2020-6792

When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents. This vulnerability affects Thunderbird 68.5...

CVE-2020-6792

CVE-2020-6792 affects Mozilla Thunderbird prior to 68.5. When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents, a memory-safety issue. The vulnerability is listed against Thunderbird

CVE-2020-6792

When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents. This vulnerability affects Thunderbird 68.5...

Cisco Email Security Appliance DoS (cisco-sa-20200219-esa-dos)

According to its self-reported version, Cisco Email Security Appliance ESA is affected by a denial of service DoS vulnerability in the email message filtering feature due to improper handling of email messages that contain large attachments. An unauthenticated, remote attacker can exploit this, b...

Cisco Email Security Appliance Content Filter Bypass Vulnerability (CSCvq65126)

According to its self-reported version, Cisco Email Security Appliance ESA is affected by an input-validation flaw related to the email message filtering feature and zip files that allows denial of service attacks. Please see the included Cisco BID and Cisco Security Advisory for more information...

Cisco Email Security Appliance Denial of Service Vulnerability (CSCvo89192)

According to its self-reported version, Cisco Email Security Appliance ESA is affected by an input-validation flaw related to the email message filtering feature that allows denial of service attacks. Please see the included Cisco BID and Cisco Security Advisory for more information TRUSTED...

CVE-2020-3132: Uncontrolled Resource Consumption

A vulnerability in the email message scanning feature of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause a temporary denial of service DoS condition on an affected device. The vulnerability is due to inadequate parsing...

PT-2020-1741

Name of the Vulnerable Software and Affected Versions Cisco AsyncOS Software for Cisco Email Security Appliance ESA and Cisco Content Security Management Appliance SMA affected versions not specified Description A vulnerability in the email message filtering feature could allow an unauthenticated...

MGASA-2020-0091 Updated thunderbird packages fix security vulnerabilities

Updated thunderbird packages fix security vulnerabilities: When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents CVE-2020-6792. When processing an email message with an ill-formed envelope, Thunderbird could read data from a random...

PT-2020-19225

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 68.5 Description The issue arises when deriving an identifier for an email message, where uninitialized memory is used in addition to the message contents. Recommendations For versions prior to 68.5, update to...

Input validation

A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of zip files. An...