18615 matches found
CVE-2020-27974
CVE-2020-27974 affects NeoPost Mail Accounting Software Pro 5.0.6 and is described as a Cross-Site Scripting (XSS) vulnerability in php/Commun/FUS_SCM_BlockStart.php?code=. The connected sources consistently report an XSS condition without additional exploit details; no specific affected versions...
CVE-2020-27976
osCommerce Phoenix CE before 1.0.5.4 allows OS command injection remotely. Within admin/mail.php, a from POST parameter can be passed to the application. This affects the PHP mail function, and the sendmail -f option...
PT-2020-16883
Name of the Vulnerable Software and Affected Versions osCommerce Phoenix CE versions prior to 1.0.5.4 Description The issue allows for OS command injection remotely. It is caused by a vulnerable from POST parameter in the admin/mail.php file, which affects the PHP mail function and the sendmail -...
Amazon Linux AMI : dovecot (ALAS-2020-1435)
The version of dovecot installed on the remote host is prior to 2.2.36-6.21. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1435 advisory. A flaw was found in dovecot. A remote attacker could cause a denial of service by repeatedly sending emails containing...
PT-2020-16881
Name of the Vulnerable Software and Affected Versions NeoPost Mail Accounting Software Pro version 5.0.6 Description The issue allows for XSS in the php/Commun/FUS SCM BlockStart.php endpoint, specifically through the code parameter. Recommendations For NeoPost Mail Accounting Software Pro versio...
CVE-2020-27974: Improper Neutralization of Input During Web Page Generation
NeoPost Mail Accounting Software Pro 5.0.6 allows php/Commun/FUSSCMBlockStart.php?code= XSS...
CVE-2020-27976: Improper Neutralization of Special Elements used in an OS Command
osCommerce Phoenix CE before 1.0.5.4 allows OS command injection remotely. Within admin/mail.php, a from POST parameter can be passed to the application. This affects the PHP mail function, and the sendmail -f option...
CVE-2019-8645
An issue existed in the handling of encrypted Mail. This issue was addressed with improved isolation of MIME in Mail. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra. An attacker in a privileged network position may be able to...
CVE-2019-8645
An issue existed in the handling of encrypted Mail. This issue was addressed with improved isolation of MIME in Mail. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra. An attacker in a privileged network position may be able to...
Code injection
An issue existed in the handling of encrypted Mail. This issue was addressed with improved isolation of MIME in Mail. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra. An attacker in a privileged network position may be able to...
CVE-2019-8645
An issue existed in the handling of encrypted Mail. This issue was addressed with improved isolation of MIME in Mail. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra. An attacker in a privileged network position may be able to...
CVE-2019-8645
CVE-2019-8645 relates to macOS Mail handling of S/MIME-encrypted messages. The issue stems from insufficient isolation of MIME in Mail, enabling an attacker in a privileged network position to intercept S/MIME email contents. Apple fixes identify macOS Mojave 10.14.4 and Security Update 2019-002 ...
PT-2020-16654
Name of the Vulnerable Software and Affected Versions konzept-ix publiXone versions prior to 2020.015 Description The issue is related to a RemoteFunctions endpoint with missing access control, allowing attackers to disclose sensitive user information, send arbitrary e-mails, escalate the...
PT-2020-11280
Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.14.4 Security Update versions prior to 2019-002 for High Sierra and Sierra Description An issue existed in the handling of encrypted Mail, which could allow an attacker in a privileged network position to intercept t...
CVE-2019-8645: Undefined Security Weakness
An issue existed in the handling of encrypted Mail. This issue was addressed with improved isolation of MIME in Mail. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra. An attacker in a privileged network position may be able to...
Fedora 33 : claws-mail (2020-1f60842034)
Update to 3.17.7 -- https://www.claws-mail.org/news.php Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
MGASA-2020-0394 Updated claws-mail packages fix a security vulnerability
Shielded template's |program and |attachprogram so that the command-line that is executed does not allow sequencing such as with && || ;, preventing possible execution of nasty, or at least unexpected, commands. No CVE...
Updated claws-mail packages fix a security vulnerability
Shielded template's |program and |attachprogram so that the command-line that is executed does not allow sequencing such as with && || ;, preventing possible execution of nasty, or at least unexpected, commands. No CVE...
Fedora: Security Advisory for claws-mail (FEDORA-2020-1f60842034)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Election Security: Beyond Mail-In Voting
As a highly publicized event, every four years the U.S presidential election comes with inevitable security risks — and interest from high-level hackers and sophisticated cybercriminals looking to sway its results. The upcoming election ups the stakes — it has captured the attention of everyone...