org.apache.james.examples:custom-james-assembly (>=3.7.0, <=3.7.3), org.apache.james.examples:custom-mailets (>=3.6.0, <=3.7.3) +140 more potentially affected by CVE-2023-26269 via org.apache.james:javax-mail-extension (>=3.1.0, <=3.7.3)

org.apache.james:javax-mail-extension MAVEN version =3.1.0, =3.7.0, =3.6.0, =3.7.0, =3.7.0, =3.4.0, =3.4.0, =3.6.0, =3.1.0, =3.1.0, =3.7.0, =3.4.0, =3.1.0, =3.1.0, =3.7.0, =3.7.3 and more Source cves: CVE-2023-26269 Source advisory: OSV:GHSA-W7R6-V4J7-H94Whttps://vulners.com/osvghsa/OSV:GHSA-W7R6...

org.apache.james.examples:custom-james-assembly (>=3.7.0, <=3.7.3), org.apache.james.examples:custom-mailets (>=3.6.0, <=3.7.3) +140 more potentially affected by CVE-2023-26269 via org.apache.james:javax-mail-extension (>=3.1.0, <=3.7.3)

org.apache.james:javax-mail-extension MAVEN version =3.1.0, =3.7.0, =3.6.0, =3.7.0, =3.7.0, =3.4.0, =3.4.0, =3.6.0, =3.1.0, =3.1.0, =3.7.0, =3.4.0, =3.1.0, =3.1.0, =3.7.0, =3.7.3 and more Source cves: CVE-2023-26269 Source advisory: GHSA-W7R6-V4J7-H94W...

org.apache.james.examples:custom-james-assembly (>=3.7.0, <=3.7.3), org.apache.james.examples:custom-mailets (>=3.6.0, <=3.7.3) +140 more potentially affected by CVE-2023-26269 via org.apache.james:javax-mail-extension (>=3.1.0, <=3.7.3)

org.apache.james:javax-mail-extension MAVEN version =3.1.0, =3.7.0, =3.6.0, =3.7.0, =3.7.0, =3.4.0, =3.4.0, =3.6.0, =3.1.0, =3.1.0, =3.7.0, =3.4.0, =3.1.0, =3.1.0, =3.7.0, =3.7.3 and more Source cves: CVE-2023-26269 Source advisory: MEND:CVE-2023-26269...

Multiple Stored XSS via mail parameter

Description In PhpMyFaq, while submitting a question, the mail parameter is accepting unsanitized user input which leads to Stored XSS vulnerability, executing on Admin Panel /admin/?action=question. Proof of Concept 1. Go to https://roy.demo.phpmyfaq.de/index.php?action=ask&categoryid=0 1. Fill ...

[SECURITY] Fedora 37 Update: thunderbird-102.9.1-1.fc37

Mozilla Thunderbird is a standalone mail and newsgroup client...

Secure Mail calendar Widget on Android

While customer is able to add the Secure Mail calendar widget to the device home screen, they are unable to do so for devices enrolled in WPCOD mode"Work Profile / Corporate Owned Device"...

RLSA-2023:1403 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.9.0. Security Fixes: Mozilla: Incorrect code generation during JIT compilation CVE-2023-25751 Mozilla: Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9 CVE-2023-28176 Mozill...

[SECURITY] Fedora 38 Update: thunderbird-102.9.0-1.fc38

Mozilla Thunderbird is a standalone mail and newsgroup client...

Format string

An authenticated malicious user could acquire the simple mail transfer protocol SMTP Password in cleartext format, despite it being protected and hidden behind asterisks. The attacker could then perform further attacks using the SMTP credentials...

CVE-2023-24842

HGiga MailSherlock has vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to access partial content of another user’s mail by changing user ID and mail ID within URL...

CVE-2023-24842

HGiga MailSherlock has vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to access partial content of another user’s mail by changing user ID and mail ID within URL...

CVE-2023-24842 HGiga MailSherlock - Broken Access Control

HGiga MailSherlock has vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to access partial content of another user’s mail by changing user ID and mail ID within URL...

CVE-2023-24842 HGiga MailSherlock - Broken Access Control

HGiga MailSherlock has vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to access partial content of another user’s mail by changing user ID and mail ID within URL...

HGiga MailSherlock SQL Injection Vulnerability

Hgiga MailSherlock is an enterprise email audit system from China Henderson Technology Hgiga. A SQL injection vulnerability exists in HGiga MailSherlock version 4.5, which stems from a query function that does not adequately validate user input. An attacker can exploit this vulnerability by...

PT-2023-19819 · Hgiga · Hgiga Mailsherlock

Name of the Vulnerable Software and Affected Versions: HGiga MailSherlock affected versions not specified Description: The issue is related to insufficient access control, allowing an unauthenticated remote user to access partial content of another user's mail. This can be achieved by modifying t...

PT-2023-8664 · Unknown · Mailsherlock

Name of the Vulnerable Software and Affected Versions: MailSherlock affected versions not specified Description: The issue is related to the lack of protection against SQL query structure exploitation in the email audit record platform. This can be exploited by a remote attacker to execute...

CVE-2023-24842: Authorization Bypass Through User-Controlled Key

HGiga MailSherlock has vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to access partial content of another user’s mail by changing user ID and mail ID within URL...

WordPress Creative Mail Plugin < 1.6.0 Multiple CSRF Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:constantcontact:creativemail"; if description...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...