15554 matches found
CVE-2015-9057
Multiple cross-site scripting XSS vulnerabilities in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allow remote attackers to inject arbitrary web script or HTML via multiple parameters, related to /users/index.htm, /quarantine/spam/manage.htm, /quarantine/spam/whitelist.htm,...
Open redirect
Open redirect vulnerability in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the destination parameter...
CVE-2015-9058
Open redirect vulnerability in Proxmox Mail Gateway (pre hotfix 4.0-8-097d26a9) allows a remote attacker to use the destination parameter to redirect users to arbitrary web sites, enabling phishing via trusted gateways. Affected product: Proxmox Mail Gateway. Root cause: improper handling of the ...
CVE-2015-9058
Open redirect vulnerability in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the destination parameter...
CVE-2015-9057
CVE-2015-9057 describes multiple cross-site scripting (XSS) vulnerabilities affecting Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9. The issue allows remote attackers to inject arbitrary web script or HTML via parameters in URLs such as /users/index.htm, /quarantine/spam/manage.htm, /quaran...
CVE-2015-9057
Multiple cross-site scripting XSS vulnerabilities in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allow remote attackers to inject arbitrary web script or HTML via multiple parameters, related to /users/index.htm, /quarantine/spam/manage.htm, /quarantine/spam/whitelist.htm,...
WordPress PHPMailer Host Header Command Injection
This module exploits a command injection vulnerability in WordPress version 4.6 with Exim as an MTA via a spoofed Host header to PHPMailer, a mail-sending library that is bundled with WordPress. A valid WordPress username is required to exploit the vulnerability. Additionally, due to the altered...
CVE-2017-7440
Kerio Connect 8.0.0 through 9.2.2, and Kerio Connect Client desktop application for Windows and Mac 9.2.0 through 9.2.2, when e-mail preview is enabled, allows remote attackers to conduct clickjacking attacks via a crafted e-mail message...
CVE-2017-2095
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in the mail function leading to an alteration of the order of mail folders via unspecified vectors...
Authentication flaw
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in the mail function leading to an alteration of the order of mail folders via unspecified vectors...
CVE-2017-2095
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in the mail function leading to an alteration of the order of mail folders via unspecified vectors...
CVE-2017-2095
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in the mail function leading to an alteration of the order of mail folders via unspecified vectors...
CVE-2017-2095
CVE-2017-2095 affects Cybozu Garoon 3.0.0 to 4.2.3. A remote authenticated attacker can bypass access restrictions in the mail function, resulting in alteration of the order of mail folders. The root cause is an access restriction flaw in the mail handling logic. remediation per the documents is ...
[SECURITY] Fedora 25 Update: dovecot-2.2.29.1-1.fc25
Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are in their subpackages...
Allowing communication from XenMobile apps to the Launch Darkly Service for feature flags
What are Feature Flags? Feature flags are a quality control measure for Citrix to be able to dynamically roll back to the previous working version of the app before a new feature was introduced. Since a bug fix on the public app stores is subject to delays due to app store submission and approval...
CVE-2017-7983
In Joomla! 1.5.0 through 3.6.5 fixed in 3.7.0, mail sent using the JMail API leaked the used PHPMailer version in the mail headers...
Design/Logic Flaw
In Joomla! 1.5.0 through 3.6.5 fixed in 3.7.0, mail sent using the JMail API leaked the used PHPMailer version in the mail headers...
CVE-2017-7983
In Joomla! 1.5.0 through 3.6.5 fixed in 3.7.0, mail sent using the JMail API leaked the used PHPMailer version in the mail headers...
CVE-2017-7983
CVE-2017-7983 affects Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0). The JMail API leaks the PHPMailer version in mail headers, causing information disclosure about the mail-sending configuration. Connected assessments (Nessus plugins for Joomla! 3.x and 2.5.x families) corroborate the same issue ...