380 matches found
PT-2019-1137
Name of the Vulnerable Software and Affected Versions: Microsoft Office versions affected versions not specified Office 365 ProPlus affected versions not specified Microsoft Outlook affected versions not specified Description: The issue is related to an information disclosure problem due to...
Apple macOS Mojave Mail UI Spoofing Vulnerability
Apple macOS Mojave is a specialized operating system developed by Apple Inc. for Mac computers.The App Store is a platform for online distribution of applications.Mail is an email component of the... A security vulnerability exists in the Mail component of Apple macOS Mojave version 10.14. The...
Description of the security update for Outlook 2013: October 9, 2018
Description of the security update for Outlook 2013: October 9, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Security Advisory...
PT-2018-2081
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description A remote code execution issue exists due to the way Microsoft Exchange software handles specially crafted email messages. This could allow a remote attacker to execute...
Multiple Cobalt Personality Disorder
Introduction Despite the notion that modern cybersecurity protocols have stopped email-based attacks, email continues to be one of the primary attack vectors for malicious actors — both for widespread and targeted operations. Recently, Cisco Talos has observed numerous email-based attacks that ar...
IBM iNotes Information Disclosure Vulnerability (CNVD-2018-19429)
IBM iNotes also known as IBM Lotus iNotes is a set of Web-based e-mail software from IBM in the United States. The software helps different types of users online and offline users to effectively manage business-critical information and collaboration. An information disclosure vulnerability exists...
Threat Outbreak Alert RuleID32460: Email Messages Distributing Malicious Software on April 13, 2018
Medium Alert ID: 57481 First Published: 2018 April 13 19:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32460 may contain the following files: Name | Si...
CVE-2018-0940: Undefined Security Weakness
Microsoft Exchange Outlook Web Access OWA in Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 20, Microsoft Exchange Server 2013 Cumulative Update 18, Microsoft Exchange Server 2013 Cumulative Update 19, Microsoft Exchange Server 2013 Service Pack 1, Microsoft Exchange Server 2016...
Out-of-bounds
A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensitive information disclosure and denial of service. In order to trigger this vulnerability, an attacker needs to send a specially crafted email message to the...
CVE-2017-14461
A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensitive information disclosure and denial of service. In order to trigger this vulnerability, an attacker needs to send a specially crafted email message to the...
CVE-2017-14461
A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensitive information disclosure and denial of service. In order to trigger this vulnerability, an attacker needs to send a specially crafted email message to the...
Threat Outbreak Alert RuleID32015: Email Messages Distributing Malicious Software on February 20, 2018
Medium Alert ID: 56873 First Published: 2018 February 20 16:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32015 may contain the following files: Name |...
CVE-2017-17752
Ability Mail Server 3.3.2 has Cross Site Scripting XSS via the body of an e-mail message, with JavaScript code executed on the Read Mail screen aka the /readmail URI. This is fixed in version 4.2.4...
Design/Logic Flaw
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Mail" component. It allows remote attackers to bypass an intended off value of the "Load remote content in messages" setting, and consequently discover an e-mail recipient's IP address, via ...
Description of the security update for Outlook 2016: October 10, 2017
None None...
Threat Outbreak Alert RuleID30772: Email Messages Distributing Malicious Software on September 28, 2017
Medium Alert ID: 55406 First Published: 2017 September 28 16:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30772 may contain the following files: Name ...
CVE-2017-12215
A vulnerability in the email message filtering feature of Cisco AsyncOS Software for the Cisco Email Security Appliance could allow an unauthenticated, remote attacker to cause an affected device to run out of memory and stop scanning and forwarding email messages. When system memory is depleted,...
PT-2017-12405
Name of the Vulnerable Software and Affected Versions Cisco AsyncOS Software for Cisco Email Security Appliance versions 9.0 through the first fixed release Description A vulnerability in the email message filtering feature could allow an unauthenticated, remote attacker to cause an affected devi...
Microsoft Exchange Server Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access OWA fails to properly handle web requests. An attacker who successfully exploited this vulnerability could perform script/content injection attacks and attempt to trick the user into disclosing sensitive...
