[SECURITY] Fedora 31 Update: thunderbird-68.2.0-1.fc31

Mozilla Thunderbird is a standalone mail and newsgroup client...

curl: SMTP end-of-response out-of-bounds read

An out-of-bounds read flaw was found in the way curl handled certain SMTP responses. A remote attacker could use this flaw to crash curl...

Information disclosure

TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows information disclosure in the mail header of the HTML mailing API...

CVE-2010-3673

TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows information disclosure in the mail header of the HTML mailing API...

CVE-2010-3673

TYPO3 information disclosure vulnerability (CVE-2010-3673) affects TYPO3 prior to 4.2.13, 4.3.x prior to 4.3.4, and 4.4.x prior to 4.4.1. The flaw allows information disclosure through the mail header of the HTML mailing API. The provided connected documents corroborate this description across mu...

CVE-2010-3673

TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows information disclosure in the mail header of the HTML mailing API...

CVE-2013-6365

Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions...

CVE-2013-6365

Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions...

CVE-2013-6365

Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions...

CVE-2013-6365

The CVE-2013-6365 entry relates to Horde Groupware Webmail 5.1.2 and describes a CSRF vulnerability in which requests to change permissions can be forged. Public references (e.g., Exploit-DB) describe a CSRF flaw in the Change of permissions function due to a missing or insufficient token in the ...

The vulnerability of the string_vformat component in the Exim mail server, which allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the stringvformat component in the Exim mail server is related to buffer overflow vulnerabilities. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

TYPO3 Direct Mail Information Disclosure Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Association in Switzerland. direct Mail is an email marketing extension plugin used in it. An information disclosure vulnerability exists in TYPO3 Direct Mail 5.2.2 and prior versions. The vulnerability ste...

USN-4160-1: UW IMAP vulnerability

It was discovered that UW IMAP incorrectly handled inputs. A remote attacker could possibly use this issue to execute arbitrary OS commands...

Phorpiex Botnet Shifts Gears From Ransomware to Sextortion

A recent wide-scale campaign indicates that a decade-old botnet is shifting gears from distributing ransomware to delivering millions of sextortion threats to innocent recipients. Worse, researchers say that the botnet’s spam campaign can affect up to 27 million potential victims. The botnet,...

CVE-2019-16698

The directmail aka Direct Mail extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user with restricted permissions to the feusers table to view and export data of frontend users who are subscribed to a newsletter...

Design/Logic Flaw

The directmail aka Direct Mail extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user with restricted permissions to the feusers table to view and export data of frontend users who are subscribed to a newsletter...

CVE-2019-16698

The directmail aka Direct Mail extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user with restricted permissions to the feusers table to view and export data of frontend users who are subscribed to a newsletter...

Fedora Update for thunderbird FEDORA-2019-387474fa20

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 29 Update: thunderbird-68.1.1-1.fc29

Mozilla Thunderbird is a standalone mail and newsgroup client...

IceWarp Mail Server Cross-Site Scripting Vulnerability (CNVD-2019-36906)

IceWarp Mail Server is a mail server product from IceWarp USA. The product supports e-mail archiving, SmartAttach attachments, automatic migration, etc. IceWarp Webclient is a Web-based IceWarp client program. A cross-site scripting vulnerability exists in IceWarp Webclient versions prior to...