CVE-2019-16378

OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 is prone to a signature-bypass vulnerability with multiple From: addresses, which might affect applications that consider a domain name to be relevant to the origin of an e-mail message...

CVE-2019-16378

OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 is prone to a signature-bypass vulnerability with multiple From: addresses, which might affect applications that consider a domain name to be relevant to the origin of an e-mail message...

Roundcube Webmail < 1.2.0 XSS Vulnerability

Roundcube Webmail is prone to a cross-site scripting XSS vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

PT-2019-19854

Name of the Vulnerable Software and Affected Versions Openfind Mail2000 versions 6.0 through 7.0 Description An issue was discovered in Openfind Mail2000 Webmail, where XSS can occur via an 'object data="data:text/html' substring in an e-mail message. Recommendations For Openfind Mail2000 version...

PT-2019-7239

Name of the Vulnerable Software and Affected Versions MailEnable versions prior to 8.60 Description The issue allows for Stored XSS attacks through the use of a malformed "" character in the body of an e-mail message. Recommendations For MailEnable versions prior to 8.60, update to version 8.60 o...

CVE-2015-9279: Improper Neutralization of Input During Web Page Generation

MailEnable before 8.60 allows Stored XSS via malformed use of " " character in the body of an e-mail message...

zsh: buffer overflow in utils.c:checkmailpath() can lead to local arbitrary code execution

A buffer overflow flaw was found in the zsh shell check path functionality. A local, unprivileged user can create a specially crafted message file, which, if used to set a custom "you have new mail" message, leads to code execution in the context of the user who receives the message. If the user...

CVE-2018-14950

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "a xlink:href=" attack...

CVE-2018-14953

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "math xlink:href=" attack...

CVE-2018-14954

The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute...

CVE-2018-14952

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "maction xlink:href=" attack...

CVE-2018-14954: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute...

PT-2018-12828

Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.23 Description The issue concerns a problem with the mail message display page, where an XSS attack can be performed using a specific input, such as a "maction xlink:href=" attack. Recommendations For...

PT-2018-12826

Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.23 Description The issue concerns a problem with the mail message display page, where an XSS attack can be performed using a specific vector involving an svg tag and an xlink:href attribute. Recommendations F...

PT-2018-12830

Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.23 Description The issue affects the mail message display page, where an XSS attack can be performed via the formaction attribute. Recommendations For versions prior to 1.4.23, update to version 1.4.23 or lat...

PT-2018-12829

Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.23 Description The issue concerns a problem with the mail message display page, where an XSS attack can be performed using a specific type of input, namely a "math xlink:href=" attack. Recommendations For...

PT-2018-12827

Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.23 Description The issue concerns a problem with the mail message display page, where an XSS attack can be performed using a specific type of input, such as a "form action='data:text" attack. Recommendations...

CVE-2018-14953: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "...

CVE-2018-14950: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "...

CVE-2018-14955: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations animate to attribute...