Lucene search
+L

18502 matches found

CNNVD
CNNVD
•added 2022/11/29 12:00 a.m.•27 views

Johnlong software Raiden MAILD Mail Server security vulnerability

Team Johnlong software Raiden MAILD Mail Server is a mail server software from Team Johnlong software. A security vulnerability exists in Team Johnlong software Raiden MAILD Mail Server versions prior to v4.7.4. The vulnerability originates from the fact that a remote attacker with general user...

8CVSS8AI score0.00935EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/29 12:00 a.m.•10 views

CVE-2022-41675: Improper Neutralization of Formula Elements in a CSV File

A remote attacker with general user privilege can inject malicious code in the form content of Raiden MAILD Mail Server website. Other users export form content as CSV file can trigger arbitrary code execution and allow the attacker to perform arbitrary system operation or disrupt service on the...

8CVSS6.4AI score0.00935EPSS
SaveExploits0References3
Ubuntu
Ubuntu
•added 2022/11/24 2:02 p.m.•134 views

USN-5741-1: Exim vulnerability

It was discovered that Exim incorrectly handled certain regular expressions. An attacker could use this issue to cause Exim to crash, resulting in a denial of service, or possibly execute arbitrary code...

7.5CVSS7.5AI score0.05014EPSS
SaveExploits0
CNVD
CNVD
•added 2022/11/23 12:00 a.m.•88 views

WordPress Creative Mail Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Creative Mail 1.5.4 and earlier versions contain a cross-site request forgery vulnerability...

3.1AI score0.00772EPSS
SaveExploits0Affected Software1
Redos
Redos
•added 2022/11/22 12:00 a.m.•45 views

ROS-20221122-01

Vulnerability of muttdecodeuuencoded function implementation in Mutt mail client is related to operation overflow out of memory buffer boundaries. Exploitation of the vulnerability could allow a remote intruder gain unauthorized access to protected information or cause a denial of service...

5.3CVSS6.1AI score0.01711EPSS
SaveExploits2
osv_rlsa
osv_rlsa
•added 2022/11/21 11:16 a.m.•33 views

RLSA-2022:8547 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.5.0. Security Fixes: Mozilla: Service Workers might have learned size of cross-origin media files CVE-2022-45403 Mozilla: Fullscreen notification bypass CVE-2022-45404 Mozilla:...

9.8CVSS9.3AI score0.01073EPSS
SaveExploits0References14
RedHat Linux
RedHat Linux
•added 2022/11/21 11:11 a.m.•37 views

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a...

9.8CVSS6.8AI score0.01073EPSS
SaveExploits0References14
osv_alsa
osv_alsa
•added 2022/11/21 12:00 a.m.•37 views

ALSA-2022:8547 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.5.0. Security Fixes: Mozilla: Service Workers might have learned size of cross-origin media files CVE-2022-45403 Mozilla: Fullscreen notification bypass CVE-2022-45404 Mozilla:...

9.8CVSS9.2AI score0.01073EPSS
SaveExploits0References28
osv_alsa
osv_alsa
•added 2022/11/21 12:00 a.m.•36 views

ALSA-2022:8561 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.5.0. Security Fixes: Mozilla: Service Workers might have learned size of cross-origin media files CVE-2022-45403 Mozilla: Fullscreen notification bypass CVE-2022-45404 Mozilla:...

9.8CVSS9.2AI score0.01073EPSS
SaveExploits0References28
osv_debian
osv_debian
•added 2022/11/19 12:15 a.m.•20 views

DEBIAN-CVE-2022-4055

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attac...

7.4CVSS7.3AI score0.00692EPSS
SaveExploits1References1
NVD
NVD
•added 2022/11/19 12:15 a.m.•24 views

CVE-2022-4055

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attac...

7.4CVSS0.00692EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2022/11/19 12:15 a.m.•25 views

UBUNTU-CVE-2022-4055

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attac...

7.4CVSS7.1AI score0.00692EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2022/11/19 12:15 a.m.•385 views

CVE-2022-4055

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attac...

7.4CVSS7.1AI score0.00692EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
•added 2022/11/19 12:15 a.m.•50 views

CVE-2022-4055

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attac...

4.3CVSS2.2AI score0.00692EPSS
SaveExploits1
CNNVD
CNNVD
•added 2022/11/19 12:00 a.m.•18 views

xdg-utils security vulnerabilities

xdg-utils is a software from the xdg organization that provides integrated functionality for desktop systems. A security vulnerability exists in xdg-utils xdg-mail that stems from incorrect URL parsing when configured to use thunderbird's mailto URL, which may result in passing additional headers...

7.4CVSS7.2AI score0.00692EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2022/11/18 11:15 p.m.•23 views

CVE-2022-44740

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS5.8AI score0.00312EPSS
SaveExploits0References2
NVD
NVD
•added 2022/11/18 11:15 p.m.•31 views

CVE-2022-44740

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS0.00312EPSS
SaveExploits0References2
Prion
Prion
•added 2022/11/18 11:15 p.m.•28 views

Cross site request forgery (csrf)

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Creative Mail plugin = 1.5.4 on WordPress...

6.8CVSS8.9AI score0.00312EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2022/11/18 10:03 p.m.•12 views

CVE-2022-44740 WordPress Creative Mail plugin <= 1.5.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Creative Mail plugin = 1.5.4 on WordPress...

5.4CVSS7.4AI score0.00312EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/11/18 10:03 p.m.•40 views

CVE-2022-44740 WordPress Creative Mail plugin <= 1.5.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Creative Mail plugin = 1.5.4 on WordPress...

5.4CVSS9.2AI score0.00312EPSS
SaveExploits0References2
Rows per page
Query Builder