EUVD-2019-8892

Malware in sbrugna...

CVE-2019-19266

IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 and probably earlier versions allows XSS issue 2 of 2 in notes for objects...

CVE-2019-19265

IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 and probably earlier versions allows XSS issue 1 of 2 in notes for contacts...

IceWarp Webmail Server color Cross-Site Scripting Vulnerability

IceWarp Webmail Server is a WEB mail server. IceWarp Webmail Server color handling suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to gain access to sensitive information or hijack...

CVE-2020-8512

In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter...

CVE-2020-8512

In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter...

CVE-2020-8512

In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter...

PT-2020-20189

Name of the Vulnerable Software and Affected Versions IceWarp Webmail Server versions prior to 11.4.4.1 Description The issue concerns a problem where an attacker can execute malicious scripts. This is due to XSS in the color parameter of the "/webmail/" API endpoint. Recommendations For versions...

CVE-2020-8512: Improper Neutralization of Input During Web Page Generation

In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter...

IceWarp WebMail Server Cross-Site Scripting Vulnerability (CNVD-2020-02978)

IceWarp WebMail Server is a Web-based mail server product from the U.S. company IceWarp. The product supports email archiving, SmartAttach attachments, automatic migration and more. A cross-site scripting vulnerability exists in object annotations in IceWarp WebMail Server version 12.2.0 and...

Cross site scripting

IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 and probably earlier versions allows XSS issue 2 of 2 in notes for objects...

CVE-2019-19265

IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 and probably earlier versions allows XSS issue 1 of 2 in notes for contacts...

CVE-2019-19265

IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 are affected by a cross-site scripting vulnerability in notes for contacts. The root cause is lack of proper validation of client data by the WEB application, enabling attacker-supplied content (e.g., manipulated vCard) to execute JavaScrip...

CVE-2019-19266

IceWarp WebMail Server 12.2.0 and 12.1.x prior to 12.2.1.1 are affected by a Cross‑Site Scripting (XSS) vulnerability in object notes. The root cause is lack of proper validation of client‑side data by the WEB application, allowing injected JavaScript to execute when notes are displayed to users....

CVE-2019-19266: Improper Neutralization of Input During Web Page Generation

IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 and probably earlier versions allows XSS issue 2 of 2 in notes for objects...

PT-2020-10117

Name of the Vulnerable Software and Affected Versions IceWarp WebMail Server versions prior to 12.2.1.1 Description The issue allows for XSS in notes for objects. Recommendations For versions prior to 12.2.1.1, update to version 12.2.1.1 or later to resolve the issue...

PT-2020-10116

Name of the Vulnerable Software and Affected Versions IceWarp WebMail Server versions prior to 12.2.1.1 Description The issue allows for XSS in notes for contacts. Recommendations For versions prior to 12.2.1.1, update to version 12.2.1.1 or later to resolve the issue...

CVE-2019-19265: Improper Neutralization of Input During Web Page Generation

IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 and probably earlier versions allows XSS issue 1 of 2 in notes for contacts...

IceWarp WebMail口令取回功能输入验证漏洞

BUGTRAQ ID: 34827 CVECAN ID: CVE-2009-1469 Merak Email Server是一个全面的办公室局域网或Internet通讯邮件解决方案。 Merak邮件服务器的WebMail模块在登陆页面提供了“忘记口令”取回功能，忘记了登录口令的用户可以在这里向邮件服务器提供他们的邮件地址，之后服务器检查系统中是否存在这个地址并将相关的用户口令发回到这个地址。 在点击Forgot Password页面的提交按键时，所发送的HTTP POST请求包含有类似于以下的负载：...

CVE-2009-1467: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote attackers to inject arbitrary web script or HTML via 1 the body of a message, related to the email view and incorrect HTML filtering in the cleanHTML function in...