PT-2022-22875 · Proxmox · Proxmox Mail Gateway +1

Name of the Vulnerable Software and Affected Versions: Proxmox Virtual Environment PVE and Proxmox Mail Gateway PMG versions prior to pve-http-server 4.1-3 Description: The issue affects Proxmox Virtual Environment PVE and Proxmox Mail Gateway PMG when proxying HTTP requests between pvepmgproxy a...

CVE-2022-35507

A response-header CRLF injection vulnerability in the Proxmox Virtual Environment PVE and Proxmox Mail Gateway PMG web interface allows a remote attacker to set cookies for a victim's browser that are longer than the server expects, causing a client-side DoS. This affects Chromium-based browsers...

CVE-2022-35507

A response-header CRLF injection vulnerability in the Proxmox Virtual Environment PVE and Proxmox Mail Gateway PMG web interface allows a remote attacker to set cookies for a victim's browser that are longer than the server expects, causing a client-side DoS. This affects Chromium-based browsers...

CVE-2022-35508

Proxmox Virtual Environment PVE and Proxmox Mail Gateway PMG are vulnerable to SSRF when proxying HTTP requests between pvepmgproxy and pvepmgdaemon. An attacker with an unprivileged account can craft an HTTP request to achieve SSRF and file disclosure of any files on the server. Also, in Proxmox...

CVE-2022-35508

Proxmox CVE-2022-35508 enables SSRF when proxying HTTP requests between pve(pmg)proxy and pve(pmg)daemon, exploitable by an unprivileged user to disclose server files. In Proxmox Mail Gateway, there is also a privilege escalation route to root@pam if backup artifacts were used, because pmg-backup...

CVE-2020-15594

An SSRF issue was discovered in Zoho Application Control Plus before version 10.0.511. The mail gateway configuration feature allows an attacker to perform a scan in order to discover open ports on a machine as well as available machines on the network segment on which the instance of the product...

Server side request forgery (ssrf)

An SSRF issue was discovered in Zoho Application Control Plus before version 10.0.511. The mail gateway configuration feature allows an attacker to perform a scan in order to discover open ports on a machine as well as available machines on the network segment on which the instance of the product...

CVE-2020-15594

CVE-2020-15594 affects Zoho Application Control Plus prior to version 10.0.511. The mail gateway configuration feature exposes a Server-Side Request Forgery (SSRF) flaw that enables an attacker to scan for open ports and discover reachable machines on the same network segment. The issue is mitiga...

CVE-2020-15594

An SSRF issue was discovered in Zoho Application Control Plus before version 10.0.511. The mail gateway configuration feature allows an attacker to perform a scan in order to discover open ports on a machine as well as available machines on the network segment on which the instance of the product...

PT-2020-14519 · Zoho · Zoho Application Control Plus

Name of the Vulnerable Software and Affected Versions: Zoho Application Control Plus versions prior to 10.0.511 Description: A Server-Side Request Forgery SSRF issue was discovered in the mail gateway configuration feature, allowing an attacker to perform a scan and discover open ports on a machi...

Weak Password Vulnerability in YP Mail Gateway System

YMS Mail Gateway acts as a shield in front of mail servers, processing and filtering emails from internal users and the Internet. There is a weak password vulnerability in YMS Mail Gateway system. An attacker can break the account password to log in the system and obtain sensitive information by...

The vulnerability in the web console of the Kaspersky Secure Mail Gateway security tool, which allows access to the root user rights.

The vulnerability of the Kaspersky Secure Mail Gateway web console relates to deficiencies in the process of eliminating special elements from the output data used by the incoming component. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain root user privilege...

The vulnerability of Kaspersky Secure Mail Gateway’s email protection mechanism, related to insecure privilege management, allows unauthorized access to root rights.

The vulnerability of Kaspersky Secure Mail Gateway lies in the insecure management of privileges. Exploiting this vulnerability could allow a local attacker to gain root access to the targeted system using a specially crafted script...

Kaspersky Secure Mail Gateway Configuration File Injection Vulnerability

Kaspersky Secure Mail Gateway is an email security solution from Russia's Kaspersky Lab. The program is able to automatically filter spam, phishing sites and various malicious attachments. A security vulnerability exists in Kaspersky Secure Mail Gateway version 1.1. An attacker can exploit the...

Kaspersky Secure Mail Gateway Cross-Site Request Forgery Vulnerability

Kaspersky Secure Mail Gateway is an email security solution from Russia's Kaspersky Lab. The program is able to automatically filter spam, phishing sites and various malicious attachments. A cross-site request forgery vulnerability exists in Kaspersky Secure Mail Gateway version 1.1. A remote...

CVE-2018-6290

Local Privilege Escalation in Kaspersky Secure Mail Gateway version 1.1...

Privilege escalation

Local Privilege Escalation in Kaspersky Secure Mail Gateway version 1.1...

CVE-2018-6291

WebConsole Cross-Site Scripting in Kaspersky Secure Mail Gateway version 1.1...

CVE-2018-6291

WebConsole Cross-Site Scripting in Kaspersky Secure Mail Gateway version 1.1...

Cross site scripting

WebConsole Cross-Site Scripting in Kaspersky Secure Mail Gateway version 1.1...