Lucene search
+L

15316 matches found

NVD
NVD
added 2022/11/19 12:15 a.m.16 views

CVE-2022-4055

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attac...

7.4CVSS0.00652EPSS
SaveExploits1References1
OSV
OSV
added 2022/11/19 12:15 a.m.8 views

DEBIAN-CVE-2022-4055

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attac...

7.4CVSS7.3AI score0.00652EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
added 2022/11/19 12:15 a.m.42 views

CVE-2022-4055

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attac...

4.3CVSS2.2AI score0.00652EPSS
SaveExploits1
OSV
OSV
added 2022/11/19 12:15 a.m.9 views

UBUNTU-CVE-2022-4055

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attac...

7.4CVSS7.1AI score0.00652EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2022/11/19 12:15 a.m.375 views

CVE-2022-4055

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attac...

7.4CVSS7.1AI score0.00652EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/11/19 12:00 a.m.6 views

xdg-utils 安全漏洞

xdg-utils is a software from the xdg organization that provides integrated functionality for desktop systems. A security vulnerability exists in xdg-utils xdg-mail that stems from incorrect URL parsing when configured to use thunderbird's mailto URL, which may result in passing additional headers...

7.4CVSS7.2AI score0.00652EPSS
SaveExploits1References3
OSV
OSV
added 2022/11/18 11:15 p.m.9 views

CVE-2022-44740

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS5.8AI score0.00276EPSS
SaveExploits0References2
NVD
NVD
added 2022/11/18 11:15 p.m.21 views

CVE-2022-44740

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS0.00276EPSS
SaveExploits0References2
Prion
Prion
added 2022/11/18 11:15 p.m.17 views

Cross site request forgery (csrf)

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Creative Mail plugin = 1.5.4 on WordPress...

6.8CVSS8.9AI score0.00276EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/11/18 10:03 p.m.26 views

CVE-2022-44740 WordPress Creative Mail plugin <= 1.5.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Creative Mail plugin = 1.5.4 on WordPress...

5.4CVSS9.2AI score0.00276EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/11/18 10:03 p.m.9 views

CVE-2022-44740 WordPress Creative Mail plugin <= 1.5.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Creative Mail plugin = 1.5.4 on WordPress...

5.4CVSS7.4AI score0.00276EPSS
SaveExploits0References2
CVE
CVE
added 2022/11/18 10:03 p.m.71 views

CVE-2022-44740

The CVE-2022-44740 entry affects the WordPress Creative Mail plugin versions up to 1.5.4. The connected sources describe multiple Cross-Site Request Forgery (CSRF) vulnerabilities in this plugin, enabling attackers to trigger unwanted actions when a logged-in user interacts with the site. Reporte...

8.8CVSS7.4AI score0.00276EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/11/18 7:15 p.m.8 views

CVE-2022-40686

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS5.8AI score0.00264EPSS
SaveExploits0References1
NVD
NVD
added 2022/11/18 7:15 p.m.43 views

CVE-2022-40687

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS0.00707EPSS
SaveExploits0References1
NVD
NVD
added 2022/11/18 7:15 p.m.24 views

CVE-2022-40686

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS0.00264EPSS
SaveExploits0References1
OSV
OSV
added 2022/11/18 7:15 p.m.18 views

CVE-2022-40687

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS5.8AI score0.00707EPSS
SaveExploits0References1
Prion
Prion
added 2022/11/18 7:15 p.m.17 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

6.8CVSS8.8AI score0.00707EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/11/18 7:15 p.m.19 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

6.8CVSS8.8AI score0.00264EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/11/18 6:47 p.m.39 views

CVE-2022-40687 WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

5.4CVSS9.1AI score0.00707EPSS
SaveExploits0References1
CVE
CVE
added 2022/11/18 6:47 p.m.70 views

CVE-2022-40687

CVE-2022-40687 affects the WordPress Creative Mail plugin (versions

8.8CVSS7AI score0.00707EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder