3566 matches found
CVE-2008-2162
Cross-site scripting XSS vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the Host header in a request to a non-existent web page, which is not properly sanitized in an error page...
CVE-2008-2162
Cross-site scripting XSS vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the Host header in a request to a non-existent web page, which is not properly sanitized in an error page...
CVE-2008-2162
Affected software : SonicWall Email Security 6.1.1. Vulnerability : Cross-site scripting (XSS) in error pages due to insufficient sanitization of the Host header in requests to non-existent pages. Impact : remote attackers could inject arbitrary web script or HTML when the error page is rendered....
sonicwall-xss.txt
Affected Software/Device: SonicWall E-mail Security Version: 6.1.1 Vulnerability: Cross Site Scripting Risk: Low Description: SonicWALL Email Security is award-winning anti-spam, anti-virus, anti-phishing, policy, and compliance management e-mail protection solution. Available as a hardened...
SonicWALL Email Security 6.1.1 - Error Page Cross-Site Scripting
SonicWALL Email Security 6.1.1 - Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/29107/info SonicWALL Email Security is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input when displaying URI address data i...
SonicWALL Email Security 6.1.1 - Error Page Cross-Site Scripting
source: https://www.securityfocus.com/bid/29107/info SonicWALL Email Security is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input when displaying URI address data in an error page. An attacker may leverage this issue to execute...
CVE-2003-1557
Off-by-one buffer overflow in spamc of SpamAssassin 2.40 through 2.43, when using BSMTP mode "-B", allows remote attackers to execute arbitrary code via email containing headers with leading "." characters...
Microsoft Office Web Components ActiveX Control URL Parsing Remote Code Execution Vulnerability
Description Microsoft Office Web Components is prone to a remote code-execution vulnerability. An attacker may exploit this issue by enticing victims into opening a maliciously crafted HTML document. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the conte...
CVE-2008-0304
CVE-2008-0304 is a heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8, allowing remote code execution via a crafted external-body MIME type in an email. The root cause is an incorrect memory allocation during message preview, enabling an attacker to run a...
CVE-2008-0838
Multiple cross-site scripting XSS vulnerabilities in the web administration interface in Sophos ES1000 and ES4000 Email Security Appliance 2.1.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 error and 2 go parameters to the login page...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the web administration interface in Sophos ES1000 and ES4000 Email Security Appliance 2.1.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 error and 2 go parameters to the login page...
CVE-2008-0838
The CVE-2008-0838 entry covers multiple cross-site scripting (XSS) vulnerabilities in Sophos ES1000 and ES4000 Email Security Appliance 2.1.0.0 web administration interface. The XSS can be triggered via the login page using the (1) error and (2) go parameters, allowing remote attackers to inject ...
CVE-2008-0838
Multiple cross-site scripting XSS vulnerabilities in the web administration interface in Sophos ES1000 and ES4000 Email Security Appliance 2.1.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 error and 2 go parameters to the login page...
[INFIGO-2008-02-13]: SOPHOS Email Security Appliance Cross Site Scripting Vulnerability
INFIGO IS Security Advisory ADV-2008-02-13 http://www.infigo.hr/en/ Title: SOPHOS Email Security Appliance Cross Site Scripting Vulnerability Advisory ID: INFIGO-2008-02-13 Date: 2008-02-13 Advisory URL: http://www.infigo.hr/en/infocus/advisories/INFIGO-2008-02-13 Impact: Malicious JavaScript Cod...
SOPHOS Email Security Appliance crossite scripting
Administration interface crossite scripting...
INFIGO-2008-02-13.txt
INFIGO IS Security Advisory ADV-2008-02-13 http://www.infigo.hr/en/ Title: SOPHOS Email Security Appliance Cross Site Scripting Vulnerability Advisory ID: INFIGO-2008-02-13 Date: 2008-02-13 Advisory URL: http://www.infigo.hr/en/infocus/advisories/INFIGO-2008-02-13 Impact: Malicious JavaScript Cod...
CVE-2007-5094
The CVE pertains to Ipswitch IMail Server (8.01–8.11) where a heap-based buffer overflow in iaspam.dll within the SMTP Server can be triggered by συγκεκριed malformed Content-Type headers (long boundary parameter, a lone “MIME” line, and long Content-Transfer-Encoding lines). This allows remote c...
Symantec Client Security Internet E-mail Auto-Protect Stack Overflow
SUMMARY A stack overflow in Symantec Anti-Virus Corporate Editions Internet Email Auto-Protect feature could potentially crash the Internet Email scanning feature. Severity Low Remote Access | No ---|--- Local Access | Yes Authentication Required | Yes Exploit publicly available | No AFFECTED...
CVE-2007-1713
BASP21 (and BASP21 Pro) contains a CRLF/mail header injection flaw in bsmtp.dll (and related executable components) prior to specific versions. An unauthenticated remote attacker can inject arbitrary SMTP headers into messages by exploiting CRLF sequences in Subject lines, potentially altering th...
CVE-2006-5877
The CVE-2006-5877 entry concerns the Enigmail extension prior to 0.94.2, which does not properly handle large, encrypted email attachments. This defect can allow remote attackers to cause a denial of service (crash), as demonstrated with Mozilla Thunderbird. The available connected documents corr...