Lucene search
+L

15510 matches found

NVD
NVD
added 2019/05/17 4:29 p.m.26 views

CVE-2019-5938

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Mail'...

6.1CVSS6.1AI score0.0104EPSS
SaveExploits0References2
OSV
OSV
added 2019/05/17 4:29 p.m.8 views

CVE-2019-5938

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Mail'...

6.1CVSS5.9AI score0.0104EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2019/05/17 3:25 p.m.30 views

CVE-2019-5938

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Mail'...

5.5AI score0.0104EPSS
SaveExploits0References2
CVE
CVE
added 2019/05/17 3:25 p.m.56 views

CVE-2019-5938

CVE-2019-5938 is a stored cross-site scripting vulnerability in Cybozu Garoon’s Mail application, affecting Cybozu Garoon 4.0.0 to 4.10.1. The issue allows remote attackers to inject arbitrary web script or HTML via the Mail component. Exploitation details are not provided in the connected docume...

6.1CVSS5.5AI score0.0104EPSS
SaveExploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:00 a.m.37 views

Microsoft Windows Mail HTML Line Breaking Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. Authentication is not required to exploit this vulnerability. The specific flaw exists within the logic that implements automatic line breaks when displaying HTML content in the...

7.7CVSS2.6AI score0.12934EPSS
SaveExploits0References1
myhack58
myhack58
added 2019/05/14 12:00 a.m.113 views

Easy WP SMTP v1. 3. 9)0 day vulnerability is being attacked in the process and reproducibility-vulnerability warning-the black bar safety net

Foreword Your own blog site with wordpres hosting, last month found some abnormalities. 3.12 days, the mailbox explosion, received more than 100 letter on the site is the blasting of the notification mail. ! Day to see also not strange, because before it appeared such a situation, every day there...

6.9AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2019/05/13 5:03 a.m.12 views

thunderbird: flaw in verification of S/MIME signature resulting in signature spoofing

A flaw during verification of certain S/MIME signatures causes emails to be shown in Thunderbird as having a valid digital signature, even if the shown message contents aren't covered by the signature. The flaw allows an attacker to reuse a valid S/MIME signature to craft an email message with...

5.3CVSS7.4AI score0.01676EPSS
SaveExploits0References4
OSV
OSV
added 2019/05/09 1:29 p.m.8 views

CVE-2019-11836

The Rediffmail aka com.rediff.mail.and application 2.2.6 for Android has cleartext mail content in file storage, persisting after a logout...

4.6CVSS5.8AI score0.00303EPSS
SaveExploits1References1
NVD
NVD
added 2019/05/09 1:29 p.m.21 views

CVE-2019-11836

The Rediffmail aka com.rediff.mail.and application 2.2.6 for Android has cleartext mail content in file storage, persisting after a logout...

4.6CVSS4.8AI score0.00303EPSS
SaveExploits1References1
OSV
OSV
added 2019/05/08 5:29 p.m.6 views

DEBIAN-CVE-2019-11499

In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login component crashes if AUTH PLAIN is attempted over a TLS secured channel with an unacceptable authentication message...

7.5CVSS8.6AI score0.02525EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:00 a.m.19 views

Siemens SIPLUS NET CP343-1 ADVANCED Communications Adapter Detection

Binary data 750270.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:00 a.m.20 views

Siemens SIPLUS NET CP443-1 ADVANCED Communications Adapter Detection

Binary data 750306.prm...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2019/05/07 12:00 a.m.54 views

Fedora Update for glpi FEDORA-2019-a66789a334

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2019/05/07 12:00 a.m.63 views

Fedora Update for thunderbird FEDORA-2019-39213e0232

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
CNVD
CNVD
added 2019/05/06 12:00 a.m.34 views

Dovecot Input Validation Error Vulnerability

Dovecot is an open source based on Linux/UNIX-like systems IMAP and POP3 mail server . A security vulnerability exists in Dovecot. An attacker could exploit this vulnerability to cause a denial of service crash with specially crafted traffic...

7.5CVSS6.7AI score0.02433EPSS
SaveExploits0References1
Veracode
Veracode
added 2019/05/02 5:20 a.m.45 views

Improper Access Control

Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird...

10CVSS7.2AI score0.06058EPSS
SaveExploits1References47Affected Software2
Veracode
Veracode
added 2019/05/02 5:18 a.m.40 views

Denial Of Service (DoS)

Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird...

10CVSS8.1AI score0.084EPSS
SaveExploits0References24Affected Software2
Positive Technologies
Positive Technologies
added 2019/05/01 12:00 a.m.13 views

PT-2019-12101 · Rockwell Automation · Compactlogix 5370 +2

Name of the Vulnerable Software and Affected Versions: CompactLogix 5370 L1, L2, and L3 Controllers versions 20 through 30 Compact GuardLogix 5370 controllers versions 20 through 30 Armor Compact GuardLogix 5370 Controllers versions 20 through 30 Description: An attacker could send crafted SMTP...

7.8CVSS7.2AI score0.06104EPSS
SaveExploits0References5
The Hacker News
The Hacker News
added 2019/04/30 4:59 p.m.63 views

Over Dozen Popular Email Clients Found Vulnerable to Signature Spoofing Attacks

A team of security researchers has discovered several vulnerabilities in various implementations of OpenPGP and S/MIME email signature verification that could allow attackers to spoof signatures on over a dozen of popular email clients. The affected email clients include Thunderbird, Microsoft...

9.8CVSS0.2AI score0.08546EPSS
SaveExploits3
The Hacker News
The Hacker News
added 2019/04/30 4:59 p.m.10 views

Over Dozen Popular Email Clients Found Vulnerable to Signature Spoofing Attacks

A team of security researchers has discovered several vulnerabilities in various implementations of OpenPGP and S/MIME email signature verification that could allow attackers to spoof signatures on over a dozen of popular email clients. The affected email clients include Thunderbird, Microsoft...

9.8CVSS9.5AI score0.08546EPSS
SaveExploits3
Rows per page
Query Builder