337 matches found
CVE-2018-14951: Improper Neutralization of Input During Web Page Generation
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "...
CVE-2018-14952: Improper Neutralization of Input During Web Page Generation
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "...
CVE-2013-0589: Exposure of Sensitive Information to an Unauthorized Actor
IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows remote attackers to bypass the remote image filtering mechanism and obtain sensitive information via a crafted e-mail message. IBM X-Force ID: 83371...
zsh: buffer overflow in utils.c:checkmailpath() can lead to local arbitrary code execution
A buffer overflow flaw was found in the zsh shell check path functionality. A local, unprivileged user can create a specially crafted message file, which, if used to set a custom "you have new mail" message, leads to code execution in the context of the user who receives the message. If the user...
CVE-2018-7707: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote attackers to inject arbitrary web script or HTML via an HTML-formatted e-mail message...
PT-2018-3407 · Dovecot +3 · Dovecot +3
Name of the Vulnerable Software and Affected Versions: Dovecot affected versions not specified Description: The issue is related to an out of bounds read that can be triggered by a specially crafted email message delivered over SMTP and passed on to Dovecot by MTA. This can result in potential...
Unspecified Vulnerability in Apple iOS Mail Message Framework
Apple iOS is an operating system developed by Apple for mobile devices, and Mail Message Framework is one of the components of the e-mail message framework. A security vulnerability exists in the Mail Message Framework component of Apple iOS. The vulnerability can be exploited by a remote attacke...
CVE-2017-7152
An issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue involves the "Mail Message Framework" component. It allows remote attackers to spoof the address bar via a crafted web site...
CVE-2017-7152
An issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue involves the "Mail Message Framework" component. It allows remote attackers to spoof the address bar via a crafted web site...
Code injection
An issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue involves the "Mail Message Framework" component. It allows remote attackers to spoof the address bar via a crafted web site...
UBUNTU-CVE-2017-17847
An issue was discovered in Enigmail before 1.9.9. Signature spoofing is possible because the UI does not properly distinguish between an attachment signature, and a signature that applies to the entire containing message, aka TBE-01-021. This is demonstrated by an e-mail message with an attachmen...
CVE-2017-7152: Undefined Security Weakness
An issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue involves the "Mail Message Framework" component. It allows remote attackers to spoof the address bar via a crafted web site...
CVE-2017-7152
An issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue involves the "Mail Message Framework" component. It allows remote attackers to spoof the address bar via a crafted web site...
CVE-2017-7152
CVE-2017-7152 affects the Mail Message Framework in iOS 11.2 and earlier. Root cause: an inconsistent UI state allowed address bar spoofing when visiting a malicious site. Impact: an attacker could spoof the address bar. Remediation: Apple released a fix with iOS 11.2 (described in Apple security...
PT-2017-17545
Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.2 Description The issue involves the Mail Message Framework component and allows remote attackers to spoof the address bar via a crafted web site. Recommendations For iOS versions prior to 11.2, update to version 11.2 ...
CVE-2017-14077
HTML Injection in Securimage 3.6.4 and earlier allows remote attackers to inject arbitrary HTML into an e-mail message body via the $SERVER'HTTPUSERAGENT' parameter to exampleform.ajax.php or exampleform.php...
CVE-2017-14077
HTML Injection in Securimage 3.6.4 and earlier allows remote attackers to inject arbitrary HTML into an e-mail message body via the $SERVER'HTTPUSERAGENT' parameter to exampleform.ajax.php or exampleform.php...
CVE-2017-14077
HTML Injection in Securimage 3.6.4 and earlier allows remote attackers to inject arbitrary HTML into an e-mail message body via the $SERVER'HTTPUSERAGENT' parameter to exampleform.ajax.php or exampleform.php...
Security fix for the ALT Linux 8 package clamav version 0.99.2-alt3
Sept. 25, 2017 Anton V. Boyarshinov 0.99.2-alt3 - Fixes: + CVE-2017-6418 remote attackers can cause a denial of service out-of-bounds read via a crafted e-mail message + CVE-2017-6420 remote attackers can cause a denial of service use-after-free via a crafted PE file with WWPack compression...
