18587 matches found
DEBIAN-CVE-2021-38084
An issue was discovered in the POP3 component of Courier Mail Server before 1.1.5. Meddler-in-the-middle attackers can pipeline commands after the POP3 STLS command, injecting plaintext commands into an encrypted user session...
CVE-2021-38084
An issue was discovered in the POP3 component of Courier Mail Server before 1.1.5. Meddler-in-the-middle attackers can pipeline commands after the POP3 STLS command, injecting plaintext commands into an encrypted user session...
CVE-2021-38084
An issue was discovered in the POP3 component of Courier Mail Server before 1.1.5. Meddler-in-the-middle attackers can pipeline commands after the POP3 STLS command, injecting plaintext commands into an encrypted user session...
Session fixation
An issue was discovered in the POP3 component of Courier Mail Server before 1.1.5. Meddler-in-the-middle attackers can pipeline commands after the POP3 STLS command, injecting plaintext commands into an encrypted user session...
UBUNTU-CVE-2021-38084
An issue was discovered in the POP3 component of Courier Mail Server before 1.1.5. Meddler-in-the-middle attackers can pipeline commands after the POP3 STLS command, injecting plaintext commands into an encrypted user session...
CVE-2021-38084
An issue was discovered in the POP3 component of Courier Mail Server before 1.1.5. Meddler-in-the-middle attackers can pipeline commands after the POP3 STLS command, injecting plaintext commands into an encrypted user session...
CVE-2021-38084
CVE-2021-38084 affects the Courier Mail Server POP3 component prior to 1.1.5. A meddler-in-the-middle can pipeline commands after the POP3 STLS command, injecting plaintext commands into an encrypted user session, with impact on confidentiality, integrity, and availability. The available sources ...
CVE-2021-38084
An issue was discovered in the POP3 component of Courier Mail Server before 1.1.5. Meddler-in-the-middle attackers can pipeline commands after the POP3 STLS command, injecting plaintext commands into an encrypted user session...
Courier Mail Server injection vulnerability
Courier Mail Server is an application. A courier mail server. A security vulnerability exists in versions of Courier Mail Server prior to 1.1.5, which can be exploited by attackers to enter malicious commands after POP3 STLS commands and inject malicious commands into an encrypted user session...
Cybozu Garoon E-mail Operation Restriction Bypass Vulnerability
An operational restriction bypass vulnerability exists in e-mail in Cybozu Garoon, a portal-based OA office system of Cybozu Japan. An attacker can use this vulnerability to change e-mail data without proper privileges...
PT-2021-21943
Name of the Vulnerable Software and Affected Versions: Courier Mail Server versions prior to 1.1.5 Description: An issue in the POP3 component allows meddler-in-the-middle attackers to pipeline commands after the POP3 STLS command, injecting plaintext commands into an encrypted user session...
CVE-2021-38084: Improper Neutralization of Special Elements in Output Used by a Downstream Component
An issue was discovered in the POP3 component of Courier Mail Server before 1.1.5. Meddler-in-the-middle attackers can pipeline commands after the POP3 STLS command, injecting plaintext commands into an encrypted user session...
Cybozu Garoon E-mail Incorrect Input Validation Vulnerability (CNVD-2021-59731)
A security vulnerability exists in Cybozu Garoon, a portal-based OA office system of Cybozu Japan. An attacker could use this vulnerability to change e-mail data without proper privileges...
Claws Mail Input Validation Error Vulnerability
Claws Mail is an open source email client and news aggregator written in the GTK language. claws mail suffers from an injection vulnerability that stems from the textviewurisecuritycheck function in textview.c in Claws Mail prior to version 3.18.0, and from the 3.7.0 Sylpheed before version 3.7.0...
Fedora: Security Advisory for seamonkey (FEDORA-2021-424a36ea0f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-37746
textviewurisecuritycheck in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click...
CVE-2021-37746
textviewurisecuritycheck in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click...
DEBIAN-CVE-2021-37746
textviewurisecuritycheck in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click...