15309 matches found
SUSE CVE-2025-3932
It was possible to craft an email that showed a tracking link as an attachment. If the user attempted to open the attachment, Thunderbird automatically accessed the link. The configuration to block remote content did not prevent that. Thunderbird has been fixed to no longer allow access to web...
IceWarp Mail Server 输入验证错误漏洞
IceWarp Mail Server is a mail server product from the Czech company IceWarp IceWarp. The product supports email archiving, SmartAttach attachments, automatic migration and more. An input validation error vulnerability exists in IceWarp Mail Server, which can be exploited to cause users to be...
PT-2025-21633 · Icewarp · Icewarp Mail Server
Name of the Vulnerable Software and Affected Versions: IceWarp Mail Server version 11.4.0 Description: The issue is an open redirection vulnerability that allows an attacker to redirect a user to any domain by sending a malicious URL to the victim. For example, an attacker could use a URL like...
IceWarp Mail Server 跨站脚本漏洞
IceWarp Mail Server is a mail server product from the Czech company IceWarp IceWarp. The product supports email archiving, SmartAttach attachments, automatic migration and more. A cross-site scripting vulnerability exists in IceWarp Mail Server, which stems from the application's lack of effectiv...
PT-2025-21635 · Icewarp · Icewarp Mail Server
Name of the Vulnerable Software and Affected Versions: Icewarp Mail Server version 11.4.0 Description: The issue is related to cross-site scripting XSS that allows an attacker to modify the lastLogin cookie with malicious JavaScript code. This code will be executed when the page is rendered...
The vulnerability of the CommuniGate Pro mail server, related to errors in processing the relative path to the directory, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the CommuniGate Pro mail server is related to errors in processing the relative path to the directory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by increasing privileges...
The vulnerability of the CommuniGate Pro mail server, related to the swapping of the zero pointer, allows a hacker to disclose protected information.
The vulnerability of the CommuniGate Pro mail server is related to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...
PT-2025-21634 · Icewarp · Icewarp Mail Server
Name of the Vulnerable Software and Affected Versions: Icwarp Mail Server version 11.4.0 Description: The issue allows for HTTP host header injection, enabling the execution of arbitrary JavaScript code on page load when a user interacts with a malicious link. This is achieved by modifying the Ho...
IceWarp Mail Server 安全漏洞
IceWarp Mail Server is a mail server product from the Czech company IceWarp. The product supports email archiving, SmartAttach attachments, automatic migration and more. A security vulnerability exists in IceWarp Mail Server version 11.4.0, which originates from HTTP host header injection and cou...
The vulnerability of the CommuniGate Pro mail server, related to a countable loss of significance, allows a hacker to execute arbitrary code and trigger a service failure.
The vulnerability of the CommuniGate Pro mail server is related to a countable loss of significance. Exploiting this vulnerability can allow an attacker to execute arbitrary code and cause service failures...
Important: Red Hat Security Advisory: thunderbird security update
An update for thunderbird is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
CVE-2025-29689
A cross-site scripting XSS vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the password parameter at /mail/MailController.java...
CVE-2025-46610
ARTEC EMA Mail 6.92 allows CSRF...
CVE-2025-46611
Cross Site Scripting vulnerability in ARTEC EMA Mail v6.92 allows an attacker to execute arbitrary code via a crafted script...
Alibaba Cloud Linux 3 : 0095: evolution (ALINUX3-SA-2022:0095)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0095 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2019-3890: It was discovered...
编号撤回
Mozilla Thunderbird is a suite of e-mail client software from the Mozilla Foundation in the United States that is separate from the Mozilla Application Suite. The software supports the IMAP and POP mail protocols as well as the HTML mail format. This CVE number has been withdrawn...
oa_system 跨站脚本漏洞
oasystem is a hailey individual developer's application for the day-to-day operation and management of organizations, used by employees and managers. A security vulnerability exists in oasystem versions prior to v2025.01.01, which stems from improperly cleaned input of the parameter password in t...
PT-2025-23249 · Freescout · Freescout
Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.180 Description: The issue is related to Cross-Site Scripting XSS attacks due to incorrect input validation and sanitization of user-input data during mail signature sanitization. An attacker can inject arbitra...
Umbraco Forms 安全漏洞
Umbraco Forms is a form builder from Umbraco. A security vulnerability exists in Umbraco Forms versions 7.x through 13.4.2 and prior to 15.1.2, which stems from a Send Mail workflow that does not HTML-encode user-supplied field values, which could lead to a bypass of spam and email client securit...