15449 matches found
vCloud Director Remote Code Execution Vulnerability
vCloud Director hereinafter referred to as Director is based on the virtualization capabilities of VMware vSphere and extends the resource pooling capabilities of VMware vCenter to enable IT departments to create a "VDC Virtual Data Center". "VDCs Virtual Data Centers are pools of compute, networ...
Password of share by mail is not hashed when given on the create share call (NC-SA-2020-026)
A logic error in Nextcloud Server 19.0.0 caused a plaintext storage of the share password when it was given on the initial create API call...
Nextcloud: The password of a mail share is not set if the password is given when the share is created (Nextcloud < 18)
Create a new mail share with a password by using the OCS endpoint with something like: curl -u admin:admin -X POST -H "OCS-APIRequest: true" "http://localhost/ocs/v1.php/apps/filessharing/api/v1/shares?path=welcome.txt&shareType=4&[email protected]&password=plainTextPassword" - Open the...
Mail.ru: Local SQL Injection in Content Provider (ru.mail.data.contact.ContactsProvider) of Mail.ru for Android, version 12.2.0.29734
Local SQL injection vulnerability in ContactsProvider of Mail.ru Mail application for Android special permissions required...
Fedora: Security Advisory for clamav (FEDORA-2020-b0acd7b66e)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
PT-2020-6405 · Unknown +2 · Roundcubemail +2
Name of the Vulnerable Software and Affected Versions: Roundcube Mail versions prior to 1.4.5 Description: The issue is related to a Cross Site Scripting XSS vulnerability. It is associated with the smtp config in the installer. The vulnerability may allow a remote attacker to impact data...
Nextcloud: The password of a mail share is not hashed if the password is given when the share is created
Create a new mail share with a password by using the OCS endpoint with something like: curl -u admin:admin -X POST -H "OCS-APIRequest: true" "http://localhost/ocs/v1.php/apps/filessharing/api/v1/shares?path=welcome.txt&shareType=4&[email protected]&password=plainTextPassword" - Check the...
NSA: Russia's Sandworm Hackers Have Hijacked Mail Servers
In a rare public warning, the US spy agency says the notorious arm of Russian military intelligence is targeting a known vulnerability in Exim...
Access Control Bypass
phpmailer/phpmailer is vulnerable to access control bypass. The vulnerability exists as the values of name in Content-Type, and filename in Content-Disposition were not sanitized, allowing values ending with ;.jpg to trick mail filters to accept attachments with .jpg extensions...
mail.antalyacekirge.net Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1174204 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
GHSA-F7HX-FQXW-RVVJ Insufficient output escaping of attachment names in PHPMailer
Impact CWE-116: Incorrect output escaping. An attachment added like this note the double quote within the attachment name, which is entirely valid: $mail-addAttachment'/tmp/attachment.tmp', 'filename.html";.jpg'; Will result in a message containing these headers: Content-Type:...
mail.homegrid.pt Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1173729 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2020-6831
A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR 68.8, Firefox 76, and Thunderbird 68.8.0...
CVE-2020-3811
qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability...
CVE-2020-3811
qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability...
UBUNTU-CVE-2020-3811
qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability...
CVE-2020-3811
qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability...
CVE-2020-3811
CVE-2020-3811 affects netqmail 1.06 (qmail-verify) where improper input handling allows a mail-address verification bypass. Connected Debian/Ubuntu advisories (DLA-2234, USN-4621-1, USN-4556-1) indicate this vulnerability alongside CVE-2020-3812 and older CVEs; mitigation in Debian for Jessie is ...
