18503 matches found
CVE-2022-23101
OX App Suite through 7.10.6 allows XSS via appHandler in a deep link in an e-mail message...
CVE-2022-23101
OX App Suite through 7.10.6 allows XSS via appHandler in a deep link in an e-mail message...
CVE-2022-36880
The Read Mail module in Webmin 1.995 and Usermin through 1.850 allows XSS via a crafted HTML e-mail message...
CVE-2022-36880
The Read Mail module in Webmin 1.995 and Usermin through 1.850 allows XSS via a crafted HTML e-mail message...
Cross site scripting
The Read Mail module in Webmin 1.995 and Usermin through 1.850 allows XSS via a crafted HTML e-mail message...
CVE-2022-36880
The Read Mail module in Webmin 1.995 and Usermin through 1.850 allows XSS via a crafted HTML e-mail message...
CVE-2022-23101: Improper Neutralization of Input During Web Page Generation
OX App Suite through 7.10.6 allows XSS via appHandler in a deep link in an e-mail message...
PT-2022-23684 · Webmin +1 · Webmin +1
Name of the Vulnerable Software and Affected Versions: Webmin version 1.995 Usermin versions through 1.850 Description: The issue allows for cross-site scripting XSS attacks via a crafted HTML e-mail message. This occurs in the Read Mail module of the affected software. Recommendations: For Webmi...
CVE-2022-36880: Improper Neutralization of Input During Web Page Generation
The Read Mail module in Webmin 1.995 and Usermin through 1.850 allows XSS via a crafted HTML e-mail message...
Webmin cross-site scripting vulnerabilities
A cross-site scripting vulnerability exists in Webmin, the Webmin community's Web-based system administration tool for Unix-like operating systems, due to a lack of data validation filtering of user-supplied and output data in the Read Mail module. An attacker could use this vulnerability to crea...
Directorist < 7.3.0 - Subscriber+ Arbitrary E-mail Sending
The plugin does not have authorisation and CSRF checks in an AJAX action, allowing any authenticated users to send arbitrary emails on behalf of the blog PoC fetch"/wp-admin/admin-ajax.php", "headers": "content-type": "application/x-www-form-urlencoded", , "method": "POST", "body":...
Directorist < 7.3.0 - Subscriber+ Arbitrary E-mail Sending
The plugin does not have authorisation and CSRF checks in an AJAX action, allowing any authenticated users to send arbitrary emails on behalf of the blog fetch"/wp-admin/admin-ajax.php", "headers": "content-type": "application/x-www-form-urlencoded", , "method": "POST", "body":...
MAL-2022-4452 Malicious code in mail-core-git (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ed968d6731b2ad5c42bbf83613ea38918dfd3b5cc2c3aa642c5239bc50578fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in mail-core-git
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in mail-core-git (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ed968d6731b2ad5c42bbf83613ea38918dfd3b5cc2c3aa642c5239bc50578fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
The Mail Handler creates tickets from incoming emails in the wrong projects
The mail handler in Jira Service Management JSM Server and Data Center 4.22.5 incorrectly maps new incoming emails to the wrong JSM project, instead of the project linked to the mailbox the mails were sent to. If JSM is configured to process emails and create tickets in a restricted-access projec...
The JSM Mail Handler functionality creates tickets from incoming emails in wrong projects
h3. Issue Summary When multiple Jira Service Management JSM projects are configured with a Mail Handler|https://confluence.atlassian.com/servicemanagementserver/receiving-requests-by-email-939926303.html via Project Settings Email Requests, the following issue happens: - the JSM Mail Handler...
Secure Mail Issues with Android Push Notifications
SecureMail on android devices was not getting background push notifications, therefore users had to manually open SecureMail to check for email. When examining network traces from the ADC, we observe connections to certain Google owned IP addresses are being blocked...
ROS-20220714-02
A vulnerability in the passdb account database of the Dovecot mail server is related to errors in the configuration. Exploitation of the vulnerability could allow an attacker acting remotely to escalate their privileges...
CVE-2021-38289
An issue has been discovered in Novastar-VNNOX-iCare Novaicare 7.16.0 that gives attacker privilege escalation and allows attackers to view corporate information and SMTP server details, delete users, view roles, and other unspecified impacts...