18610 matches found
CVE-2018-15638
Cross-site scripting XSS issue in mail module in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim via crafted channel names...
PT-2020-9205
Name of the Vulnerable Software and Affected Versions Odoo Community versions 14.0 and earlier Odoo Enterprise versions 14.0 and earlier Description The issue is related to improper access control in the mail module, specifically in notifications. This allows remote authenticated users to obtain...
Odoo Access Control Error Vulnerability
Odoo is an Enterprise Resource Planning ERP and Customer Relationship Management CRM system from Odoo Belgium. The system is developed in Python, with PostgreSQL as the database, and includes modules for sales management, inventory management, and financial management. A security vulnerability...
PT-2020-9206
Name of the Vulnerable Software and Affected Versions Odoo Community versions 13.0 and earlier Odoo Enterprise versions 13.0 and earlier Description The issue is related to improper access control in the mail module followers of Odoo Community and Odoo Enterprise. This allows remote authenticated...
Odoo Access Control Error Vulnerability
Odoo is an Enterprise Resource Planning ERP and Customer Relationship Management CRM system from Odoo Belgium. The system is developed in Python, with PostgreSQL as the database, and includes modules for sales management, inventory management, and financial management. An Access Control Error...
Dovecot Mail Server DoS
The vulnerability of the Dovecot mail server arises due to an uncontrolled recursion. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service failures through a specially crafted email message...
CVE-2019-11784: Improper Access Control
Improper access control in mail module notifications in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users to obtain access to arbitrary messages in conversations they were not a party to...
CVE-2019-11783: Improper Access Control
Improper access control in mail module channel partners in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users to subscribe to arbitrary mail channels uninvited...
CVE-2018-15638: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS issue in mail module in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim via crafted channel names...
CVE-2019-11785: Improper Access Control
Improper access control in mail module followers in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote authenticated users to obtain access to messages posted on business records there were not given access to, and subscribe to receive future messages...
PT-2020-8540
Name of the Vulnerable Software and Affected Versions: Odoo Community versions 13.0 and earlier Odoo Enterprise versions 13.0 and earlier Description: The issue allows remote attackers to inject arbitrary web script in the browser of a victim via crafted channel names in the mail module. This is ...
Odoo cross-site scripting vulnerabilities
Odoo is an open source enterprise management suite , its features cover CRM, sales, purchasing, inventory management , manufacturing , quality management , HR full-featured , financial management , project management , PLM and a series of perfect enterprise information needs . A cross-site...
PT-2020-9204
Name of the Vulnerable Software and Affected Versions Odoo Community versions 14.0 and earlier Odoo Enterprise versions 14.0 and earlier Description The issue is related to improper access control in the mail module, specifically affecting channel partners. This allows remote authenticated users ...
Odoo Access Control Error Vulnerability
Odoo is an Enterprise Resource Planning ERP and Customer Relationship Management CRM system from Odoo Belgium. The system is developed in Python, with PostgreSQL as the database, and includes modules for sales management, inventory management, and financial management. An Access Control Error...
Nagios Log Server Mail Settings Cross-Site Scripting
A stored cross-site scripting vulnerability exists in Nagios Log Server. The vulnerability is due to insufficient validation of user input in HTTP requests submitted to mail.php endpoint...
Roehling Postsrsd Resource Management Error Vulnerability
Roehling Postsrsd is a C-based software from the individual developer Roehling that provides reverse SRS functionality for mail servers. A security vulnerability in PostSRSd before 1.10, which originated in srs2.c, allows remote attackers to cause a denial of service CPU consumption via a...
[SECURITY] Fedora 33 Update: thunderbird-78.6.0-1.fc33
Mozilla Thunderbird is a standalone mail and newsgroup client...
Mozilla: Stack overflow due to incorrect parsing of SMTP server response codes
When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one byte. Depending on processor architecture and stack layout, this leads to stack corruption that may be exploitable. This vulnerability affects Thunderbird...
Rumble Mail Server 0.51.3135 Cross Site Scripting
Exploit Title: Rumble Mail Server 0.51.3135 - 'servername' Stored XSS Date: 2020-9-3 Exploit Author: Mohammed Alshehri Vendor Homepage: http://rumble.sf.net/ Software Link: https://sourceforge.net/projects/rumble/files/Windows%20binaries/rumble0.51.3135-setup.exe Version: Version 0.51.3135 Tested...
NetEase Mail Master (Windows client) suffers from dll hijacking vulnerability (CNVD-2020-75299)
Netease Mailbox Master is an all-platform mailbox client launched by Netease Netease, which supports the use of various brands of mailboxes such as Netease and Outlook, and supports the login of all platform devices. A dll hijacking vulnerability exists in Netease Mail Master Windows client. An...