15316 matches found
PT-2022-24373 · Vtiger · Vtiger Crm
Name of the Vulnerable Software and Affected Versions: Vtiger CRM version 7.4.0 Description: A stored cross-site scripting XSS issue was found in the e-mail template modules. This allows for malicious scripts to be stored and executed when the module is accessed. Recommendations: For Vtiger CRM...
[SECURITY] Fedora 37 Update: thunderbird-102.3.0-1.fc37
Mozilla Thunderbird is a standalone mail and newsgroup client...
Fetchmail: Multiple Vulnerabilities
Background Fetchmail is a remote mail retrieval and forwarding utility. Description Multiple vulnerabilities have been discovered in Fetchmail. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no...
[SECURITY] Fedora 36 Update: thunderbird-102.3.0-1.fc36
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 35 Update: thunderbird-102.2.1-1.fc35
Mozilla Thunderbird is a standalone mail and newsgroup client...
Hookup site targeted by typo-squatters
Ethical hacker and security researcher Kody Kinzie shared with BleepingComputer a list of over 50 domains of which many are spelling variations of the brand name Sniffies. Sniffies identifies itself as a "modern, map-based, meetup app for gay, bi, and curious guys." Kody used an open source tool...
UBUNTU-CVE-2022-31143
GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. It was found that in affected versions there is an exposure of private information defined in setup of...
PT-2022-7401 · Glpi +2 · Glpi +2
Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.3 Description: The issue concerns the exposure of private information defined in the setup of GLPI, such as smtp or cas hosts, to unauthorized individuals. This exposure can be exploited remotely, allowing attacker...
USN-5232-1 fail2ban vulnerability
Jakub Żoczek discovered that certain Fail2ban actions handled whois responses in an insecure way. If Fail2ban was configured to use certain mail actions like 'mail-whois' on a target system, a remote attacker who was able to control whois responses to this target system could possibly execute...
About the security content of iOS 16
About the security content of iOS 16 This document describes the security content of iOS 16. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent...
[SECURITY] Fedora 36 Update: exim-4.96-2.fc36
Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...
CVE-2022-26114
An improper neutralization of input during web page generation vulnerability CWE-79 in the Webmail of FortiMail before 7.2.0 may allow an unauthenticated attacker to trigger a cross-site scripting XSS attack via sending specially crafted mail messages...
CVE-2022-26114
An improper neutralization of input during web page generation vulnerability CWE-79 in the Webmail of FortiMail before 7.2.0 may allow an unauthenticated attacker to trigger a cross-site scripting XSS attack via sending specially crafted mail messages...
FortiMail - Cross-site scripting (XSS) in Webmail
An improper neutralization of input during web page generation vulnerability CWE-79 in FortiMail Webmail may allow an unauthenticated attacker to trigger a cross-site scripting XSS attack via sending specially crafted mail messages...
[SECURITY] Fedora 36 Update: thunderbird-102.2.1-1.fc36
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 35 Update: thunderbird-102.2.0-1.fc35
Mozilla Thunderbird is a standalone mail and newsgroup client...
Secure Mail: not getting ios push notifications with Microsoft Intune
You have deployed Citrix Secure Mail via Microsoft Endpoint Manager for employees to access their on prem actyvesync mailboxes in iOS Users notice they are getting Calendar events but NOT email notifications Despite having properly configured Securemail settings in Microsoft Intune as per our...
Debian: Security Advisory (DLA-3082-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3082-1] exim4 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3082-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler August 27, 2022 https://wiki.debian.org/LTS -...