Lucene search
+L

15541 matches found

Prion
Prion
added 2018/04/03 6:29 a.m.23 views

Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Mail" component. It allows man-in-the-middle attackers to read S/MIME encrypted message content by sending HTML e-mail that references remote resources but lacks a valid S/MIME signature...

4.3CVSS4.5AI score0.01136EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2018/04/03 6:00 a.m.29 views

CVE-2018-4111

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Mail" component. It allows man-in-the-middle attackers to read S/MIME encrypted message content by sending HTML e-mail that references remote resources but lacks a valid S/MIME signature...

6.2AI score0.01136EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2018/04/03 6:00 a.m.29 views

CVE-2018-4174

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Mail" component. It allows man-in-the-middle attackers to read S/MIME encrypted messages by leveraging an inconsistency in the user interface...

5.8AI score0.0148EPSS
SaveExploits0References5
CVE
CVE
added 2018/04/03 6:00 a.m.99 views

CVE-2018-4174

CVE-2018-4174 affects Apple iOS <11.3 and macOS

5.9CVSS5.5AI score0.0148EPSS
SaveExploits0References5Affected Software2
Tenable Nessus
Tenable Nessus
added 2018/04/02 12:00 a.m.103 views

macOS 10.13.x < 10.13.4 Multiple Vulnerabilities

The remote host is running a version of macOS / Mac OS X that is 10.13.x prior to 10.13.4. It is, therefore, affected by multiple vulnerabilities in the following components : - Admin Framework - APFS - ATS - CoreFoundation - CoreText - Disk Images - Disk Management - File System Events - iCloud...

10CVSS7.8AI score0.04771EPSS
SaveExploits6References43
CNVD
CNVD
added 2018/03/29 12:00 a.m.42 views

CloudBees Jenkins Mailer Plugin Cross-Site Request Forgery Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is a set of Java-based development of the United States CloudBees continuous integration tools , the tool is mainly used to monitor the order of repetitive work . Mailer Plugin is used in one of the e-mail plugin . A cross-site request forgery...

8CVSS7AI score0.06639EPSS
SaveExploits5References1
RedhatCVE
RedhatCVE
added 2018/03/28 4:21 a.m.34 views

CVE-2018-8718

Cross-site request forgery CSRF vulnerability in the Mailer Plugin 1.20 for Jenkins 2.111 allows remote authenticated users to send unauthorized mail as an arbitrary user via a /descriptorByName/hudson.tasks.Mailer/sendTestMail request...

8CVSS5.5AI score0.06639EPSS
SaveExploits5References1
Fedora
Fedora
added 2018/03/27 8:17 p.m.65 views

[SECURITY] Fedora 27 Update: glpi-9.1.7.1-2.fc27

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

6.1CVSS3AI score0.01073EPSS
SaveExploits0
Fedora
Fedora
added 2018/03/27 7:31 p.m.36 views

[SECURITY] Fedora 26 Update: glpi-9.1.7.1-2.fc26

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

6.1CVSS3AI score0.01073EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2018/03/27 4:29 p.m.15 views

CVE-2018-8718

Cross-site request forgery CSRF vulnerability in the Mailer Plugin 1.20 for Jenkins 2.111 allows remote authenticated users to send unauthorized mail as an arbitrary user via a /descriptorByName/hudson.tasks.Mailer/sendTestMail request...

8CVSS5.8AI score0.06639EPSS
SaveExploits5References6
OSV
OSV
added 2018/03/27 4:29 p.m.28 views

CVE-2018-8718

Cross-site request forgery CSRF vulnerability in the Mailer Plugin 1.20 for Jenkins 2.111 allows remote authenticated users to send unauthorized mail as an arbitrary user via a /descriptorByName/hudson.tasks.Mailer/sendTestMail request...

8CVSS6.9AI score
SaveExploits0References4
NVD
NVD
added 2018/03/27 4:29 p.m.33 views

CVE-2018-8718

Cross-site request forgery CSRF vulnerability in the Mailer Plugin 1.20 for Jenkins 2.111 allows remote authenticated users to send unauthorized mail as an arbitrary user via a /descriptorByName/hudson.tasks.Mailer/sendTestMail request...

8CVSS7.6AI score0.06639EPSS
SaveExploits5References4
Prion
Prion
added 2018/03/27 4:29 p.m.24 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Mailer Plugin 1.20 for Jenkins 2.111 allows remote authenticated users to send unauthorized mail as an arbitrary user via a /descriptorByName/hudson.tasks.Mailer/sendTestMail request...

6CVSS7.6AI score0.06639EPSS
SaveExploits5References4Affected Software1
Cvelist
Cvelist
added 2018/03/27 4:00 p.m.37 views

CVE-2018-8718

Cross-site request forgery CSRF vulnerability in the Mailer Plugin 1.20 for Jenkins 2.111 allows remote authenticated users to send unauthorized mail as an arbitrary user via a /descriptorByName/hudson.tasks.Mailer/sendTestMail request...

7.6AI score0.06639EPSS
SaveExploits5References4
Citrix
Citrix
added 2018/03/22 12:00 a.m.10 views

How to attach files in Secure Mail keeping the policy restricted

In Secure Mail/WorxMail versions 10.3.5 and later, Android users can't attach images directly from the Gallery app when the Inbound document exchange Open-in policy is set to Restricted. If you want to keep this policy set to Restricted but still allow users to add photos from the Gallery, follow...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2018/03/22 12:00 a.m.40 views

Webmin 1.720 Read Mail Symlink Vulnerability

According to its self-reported version, the Webmin install hosted on the remote host is 1.720 It is, therefore, affected by a vulnerability in the Read Mail module which allows local users to read arbitrary files. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108556...

4.9CVSS5.7AI score0.00374EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2018/03/21 12:00 a.m.13 views

The vulnerability of the base64D function in the STMP listener component of the Exim mail server allows a attacker to execute arbitrary code.

The vulnerability of the base64 component of the STMP listener in the Exim mail server arises from buffer overflows during data processing, where the size of the buffer is not a multiple of 4 4n + 3. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...

10CVSS8.4AI score0.82137EPSS
SaveExploits19References17Affected Software2
Kitploit
Kitploit
added 2018/03/17 12:15 p.m.688 views

Th3Inspector - Tool for Information Gathering

Tool For Information Gathering. Usage Short Form| Long Form| Description ---|---|--- -i| --info| Website Information -n| --number| Phone Number Information -mx| --mailserver| Find IP Address And E-mail Server -w| --whois| Domain Whois Lookup -l| --location| Find Website/IP Address Location -c|...

7.3AI score
SaveExploits0References1
NVD
NVD
added 2018/03/15 1:29 a.m.24 views

CVE-2018-7705

Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read e-mail messages to arbitrary recipients via a .. dot dot in the filename parameter to secupload2/upload.aspx...

8.1CVSS7.6AI score0.05985EPSS
SaveExploits5References3
NVD
NVD
added 2018/03/15 1:29 a.m.19 views

CVE-2018-7707

Cross-site scripting XSS vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote attackers to inject arbitrary web script or HTML via an HTML-formatted e-mail message...

6.1CVSS6.1AI score0.02589EPSS
SaveExploits5References3
Rows per page
Query Builder