Lucene search
+L

2003 matches found

NVD
NVD
•added 2024/03/21 2:36 a.m.•26 views

CVE-2020-26942

An issue discovered in Axigen Mail Server 10.3.x before 10.3.1.27 and 10.3.2.x before 10.3.3.1 allows unauthenticated attackers to submit a setAdminPassword operation request, subsequently setting a new arbitrary password for the admin account...

9.1CVSS7AI score0.00457EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/21 2:36 a.m.•11 views

CVE-2020-26942

An issue discovered in Axigen Mail Server 10.3.x before 10.3.1.27 and 10.3.2.x before 10.3.3.1 allows unauthenticated attackers to submit a setAdminPassword operation request, subsequently setting a new arbitrary password for the admin account...

9.1CVSS5.9AI score0.00457EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/03/21 12:00 a.m.•11 views

Axigen 安全漏洞

Axigen is a mail server with groupware and collaboration features from Axigen, Inc. A security vulnerability exists in Axigen versions 10.3.x prior to 10.3.1.27 and 10.3.2.x prior to 10.3.3.1 The vulnerability stems from a vulnerability that could allow an unauthenticated attacker to submit a...

9.1CVSS7AI score0.00457EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/17 12:00 a.m.•8 views

PT-2024-12825 · A.K.I · Pmailserver +1

Name of the Vulnerable Software and Affected Versions: PMailServer/PMailServer2 affected versions not specified Description: An insufficient verification vulnerability exists in the Broadcast Mail CGI pmc.exe included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is...

4.3CVSS7.1AI score0.00448EPSS
SaveExploits0References6
Prion
Prion
•added 2024/03/15 3:32 a.m.•111 views

Cross site request forgery (csrf)

An issue discovered in Axigen Mail Server 10.3.x before 10.3.1.27 and 10.3.2.x before 10.3.3.1 allows unauthenticated attackers to submit a setAdminPassword operation request, subsequently setting a new arbitrary password for the admin account...

7.8AI score0.00457EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/03/11 12:00 a.m.•15 views

Postal security breach

Postal is Postal open source a complete and fully functional mail server . It is intended for use by Web sites and Web servers. A security vulnerability exists in Postal versions prior to 3.0 that stems from vulnerability to SMTP smuggling attacks, allowing attackers to spoof incoming e-mail...

5.3CVSS6.7AI score0.00664EPSS
SaveExploits1References5
CVE
CVE
•added 2024/03/06 12:00 a.m.•89 views

CVE-2020-26942

Axigen Mail Server vulnerability CVE-2020-26942 affects Axigen Mail Server 10.3.x before 10.3.1.27 and 10.3.2.x before 10.3.3.1. An unauthenticated attacker can send a setAdminPassword operation request to change the admin password, enabling unauthorized admin access. Impact is described as high ...

9.1CVSS7.2AI score0.00457EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/03/06 12:00 a.m.•44 views

CVE-2020-26942

An issue discovered in Axigen Mail Server 10.3.x before 10.3.1.27 and 10.3.2.x before 10.3.3.1 allows unauthenticated attackers to submit a setAdminPassword operation request, subsequently setting a new arbitrary password for the admin account...

7AI score0.00457EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/06 12:00 a.m.•14 views

CVE-2020-26942

An issue discovered in Axigen Mail Server 10.3.x before 10.3.1.27 and 10.3.2.x before 10.3.3.1 allows unauthenticated attackers to submit a setAdminPassword operation request, subsequently setting a new arbitrary password for the admin account...

7.3AI score0.00457EPSS
SaveExploits0References1
OSV
OSV
•added 2024/02/29 10:15 a.m.•11 views

CVE-2024-1619

Kaspersky has fixed a security issue in the Kaspersky Security 8.0 for Linux Mail Server. The issue was that an attacker could potentially force an administrator to click on a malicious link to perform unauthorized actions...

8.8CVSS5.8AI score0.00379EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/29 10:15 a.m.•33 views

CVE-2024-1619

Kaspersky has fixed a security issue in the Kaspersky Security 8.0 for Linux Mail Server. The issue was that an attacker could potentially force an administrator to click on a malicious link to perform unauthorized actions...

8.8CVSS6.1AI score0.00379EPSS
SaveExploits0References1
Prion
Prion
•added 2024/02/29 10:15 a.m.•27 views

Security feature bypass

Kaspersky has fixed a security issue in the Kaspersky Security 8.0 for Linux Mail Server. The issue was that an attacker could potentially force an administrator to click on a malicious link to perform unauthorized actions...

5.8CVSS7.3AI score0.00379EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/02/29 9:22 a.m.•19 views

CVE-2024-1619

Kaspersky has fixed a security issue in the Kaspersky Security 8.0 for Linux Mail Server. The issue was that an attacker could potentially force an administrator to click on a malicious link to perform unauthorized actions...

6.1CVSS6.8AI score0.00379EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/02/29 9:22 a.m.•48 views

CVE-2024-1619

Kaspersky has fixed a security issue in the Kaspersky Security 8.0 for Linux Mail Server. The issue was that an attacker could potentially force an administrator to click on a malicious link to perform unauthorized actions...

6.1CVSS6.4AI score0.00379EPSS
SaveExploits0References1
CVE
CVE
•added 2024/02/29 9:22 a.m.•146 views

CVE-2024-1619

CVE-2024-1619 affects Kaspersky Security 8.0 for Linux Mail Server. The vulnerability allows an attacker to coerce an administrator into clicking a malicious link, enabling unauthorized actions. Affected component/process: Kaspersky Security 8.0 for Linux Mail Server; root cause details are not p...

8.8CVSS6.1AI score0.00379EPSS
SaveExploits0References1Affected Software1
Fedora
Fedora
•added 2024/02/14 2:25 a.m.•32 views

[SECURITY] Fedora 39 Update: clamav-1.0.5-1.fc39

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

7.5CVSS7.4AI score0.84841EPSS
SaveExploits0
Malwarebytes
Malwarebytes
•added 2024/02/13 2:28 p.m.•37 views

Patch now! Roundcube mail servers are being actively exploited

The Cybersecurity & Infrastructure Security Agency CISA has added a vulnerability in Roundcube Webmail to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. This means that Federal Civilian Executive Branch FCEB agencies need to remediate this vulnerability by...

5.8CVSS5.8AI score0.6366EPSS
SaveExploits2
BDU FSTEC
BDU FSTEC
•added 2024/02/02 12:00 a.m.•22 views

The vulnerability of Kaspersky Security for Linux Mail Server 8’s antivirus software lies in its lack of measures to neutralize certain special elements. This vulnerability allows attackers to carry out unauthorized activities.

The vulnerability of Kaspersky Security for Linux Mail Server 8 exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to perform unauthorized actions when an administrator clicks on a malicious link...

4.9CVSS6.3AI score0.00379EPSS
SaveExploits0References3Affected Software1
Debian
Debian
•added 2024/01/30 12:49 p.m.•46 views

[SECURITY] [DLA 3725-1] postfix security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3725-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès January 30, 2024 https://wiki.debian.org/LTS -...

5.3CVSS5.1AI score0.02635EPSS
SaveExploits4
OSV
OSV
•added 2024/01/29 10:52 a.m.•11 views

USN-6611-1 exim4 vulnerability

It was discovered that Exim incorrectly handled certain requests. A remote attacker could possibly use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism...

5.3CVSS7.3AI score0.01102EPSS
SaveExploits1References2
Rows per page
Query Builder