Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Mail app temporarily stores cleartext password in database until OAuth2 setup is done

None...

Blind SSRF via server URL input in the Nextcloud Mail app

None...

CVE-2023-23944: Cleartext Storage of Sensitive Information

Nextcloud mail is an email app for the nextcloud home server platform. In versions prior to 2.2.2 user's passwords were stored in cleartext in the database during the duration of OAuth2 setup procedure. Any attacker or malicious user with access to the database would have access to these user...

PT-2023-19314

Name of the Vulnerable Software and Affected Versions Nextcloud Mail versions prior to 2.2.2 Description The issue concerns the storage of user passwords in cleartext in the database during the OAuth2 setup procedure. Any attacker or malicious user with access to the database would have access to...

ALSA-2023:0606 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.7.1. Security Fixes: Mozilla: Revocation status of S/Mime signature certificates was not checked CVE-2023-0430 For more details about the security issues, including the impact, a CVSS...

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.7.1. Security Fixes: Mozilla: Revocation status of S/Mime signature certificates was not checked CVE-2023-0430 For more details about the security issues, including the impact, a CVSS...

[SECURITY] Fedora 36 Update: thunderbird-102.7.1-2.fc36

Mozilla Thunderbird is a standalone mail and newsgroup client...

[SECURITY] Fedora 37 Update: thunderbird-102.7.1-2.fc37

Mozilla Thunderbird is a standalone mail and newsgroup client...

CVE-2022-45807

Cross-Site Request Forgery CSRF in WPVibes WP Mail Log plugin = 1.0.1 versions...

CVE-2022-45807

Cross-Site Request Forgery CSRF in WPVibes WP Mail Log plugin = 1.0.1 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF in WPVibes WP Mail Log plugin = 1.0.1 versions...

CVE-2022-45807 WordPress WP Mail Log Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF in WPVibes WP Mail Log plugin = 1.0.1 versions...

CVE-2022-45807 WordPress WP Mail Log Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF in WPVibes WP Mail Log plugin = 1.0.1 versions...

CVE-2022-45807

CVE-2022-45807 is a CSRF vulnerability in the WPVibes WP Mail Log plugin, affecting versions &lt;= 1.0.1. The NVD entry reports a CVSS v3.1 base score of 8.8 (HIGH) with network attack vector, requiring user interaction and no privileges, and impact to confidentiality, integrity, and availability...

PT-2023-14759 · Wpvibes · Wpvibes Wp Mail Log

Name of the Vulnerable Software and Affected Versions: WPVibes WP Mail Log plugin versions 1.0.1 and earlier Description: The issue is related to Cross-Site Request Forgery CSRF in the WPVibes WP Mail Log plugin. This means an attacker can trick a user into performing unintended actions on a web...

WordPress Plugin WP Mail Log: Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2022-45807: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF in WPVibes WP Mail Log plugin = 1.0.1 versions...

Hackers Abused Microsoft's "Verified Publisher" OAuth Apps to Breach Corporate Email Accounts

Microsoft on Tuesday said it took steps to disable fake Microsoft Partner Network MPN accounts that were used for creating malicious OAuth applications as part of a phishing campaign designed to breach organizations' cloud environments and steal email. "The applications created by these fraudulen...