Debian: Security Advisory (DLA-383-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-887-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

mail-place.com Cross Site Scripting vulnerability OBB-3208744

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

NextCloud Mail Insufficient Validation Internal Scan

The vulnerability of NextCloud Mail’s email client stems from insufficient validation of incoming requests. Exploiting this vulnerability allows a malicious actor to scan internal services and servers accessible from the local network of the NextCloud server...

CVE-2022-46501

Accruent LLC Maintenance Connection 2021 all & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function...

Sql injection

Accruent LLC Maintenance Connection 2021 all & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function...

SUSE CVE-2019-11499

In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login component crashes if AUTH PLAIN is attempted over a TLS secured channel with an unacceptable authentication message...

CVE-2022-46501

CVE-2022-46501 affects Accruent LLC Maintenance Connection 2021 (all) and 2022.2. The vulnerability is a SQL injection in the E-Mail to Work Order function. The NVD entry lists a CVSS v3.1 base score of 9.8 (CRITICAL) with network access, no user interaction, and no privileges required, yielding ...

CVE-2022-46501

Accruent LLC Maintenance Connection 2021 all & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function...

CVE-2022-46501

Accruent LLC Maintenance Connection 2021 all & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function...

CVE-2022-46501: Improper Neutralization of Special Elements used in an SQL Command

Accruent LLC Maintenance Connection 2021 all & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function...

PT-2023-14949

Name of the Vulnerable Software and Affected Versions Accruent LLC Maintenance Connection versions 2021 through 2022.2 Description The issue is related to a SQL injection vulnerability via the E-Mail to Work Order function. Recommendations For Accruent LLC Maintenance Connection versions 2021...

Parallax RAT Targeting Cryptocurrency Firms with Sophisticated Injection Techniques

Cryptocurrency companies are being targeted as part of a new campaign that delivers a remote access trojan called Parallax RAT. The malware "uses injection techniques to hide within legitimate processes, making it difficult to detect," Uptycs said in a new report. "Once it has been successfully...

SourceCodester Doctor Appointment System SQL Injection Vulnerability

SourceCodester Doctor Appointment System is an application from SourceCodester USA. It provides an appointment scheduling feature. A SQL injection vulnerability exists in SourceCodester Doctors Appointment System version 1.0, which originates from an unknown function in the file /admin/edit-doc.p...

RLSA-2023:0824 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.8.0. Security Fixes: Mozilla: Arbitrary memory write via PKCS 12 in NSS CVE-2023-0767 Mozilla: Content security policy leak in violation reports using iframes CVE-2023-25728 Mozilla:...

[SECURITY] Fedora 36 Update: clamav-0.103.8-3.fc36

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

[SECURITY] Fedora 36 Update: thunderbird-102.8.0-1.fc36

Mozilla Thunderbird is a standalone mail and newsgroup client...

GoPistolet security vulnerabilities

GoPistolet is a production-ready, easy-to-setup mail server MTA/MSA/IMAP from GoPistolet open source. A security vulnerability exists in GoPistolet that stems from a problem with unknown code in the component MTA that can lead to a denial of service...

PT-2023-2844 · Zimbra · Zimbra Collaboration

Name of the Vulnerable Software and Affected Versions: Zimbra Collaboration ZCS versions 8.8.15 through 9.0 Description: The issue is related to a lack of account status check when sending emails using 2FA two-factor authentication in Zimbra Collaboration Suite. This can allow a remote attacker t...

thunderbird security update

CentOS Errata and Security Advisory CESA-2023:0600 An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...