18619 matches found
Mail.ru: read new emails from any inbox IOS APP in notification center
IDOR vulnerability in notification center API as used by Mail.ru Mail application for iOS allowed to request notifications for arbitrary e-mail address...
Important: Red Hat Security Advisory: thunderbird security update
An update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
Mozilla Thunderbird/Firefox ESR Post-Release Reuse Vulnerability
Mozilla Thunderbird is a mail tool transformed from the mail component of the Mozilla browser, designed using the XUL programming interface language, it is designed for users of the Mozilla Firefox browser with the mail client software, the interface design is more simple, and free to...
mailservice.karelia.com Cross Site Scripting vulnerability OBB-1301743
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-24161
Guangzhou NetEase Mail Master 4.14.1.1004 on Windows has a DLL hijacking vulnerability. Attackers can use this vulnerability to execute malicious code...
CVE-2020-24161
Guangzhou NetEase Mail Master 4.14.1.1004 on Windows has a DLL hijacking vulnerability. Attackers can use this vulnerability to execute malicious code...
Code injection
Guangzhou NetEase Mail Master 4.14.1.1004 on Windows has a DLL hijacking vulnerability. Attackers can use this vulnerability to execute malicious code...
CVE-2020-24161
Guangzhou NetEase Mail Master 4.14.1.1004 on Windows has a DLL hijacking vulnerability. Attackers can use this vulnerability to execute malicious code...
CVE-2020-24161
CVE-2020-24161 affects Guangzhou NetEase Mail Master 4.14.1.1004 on Windows and is described as a DLL hijacking vulnerability. The connected documents corroborate that attackers could use this vulnerability to execute malicious code. The core details provided identify the affected product/version...
PT-2020-15642
Name of the Vulnerable Software and Affected Versions Guangzhou NetEase Mail Master version 4.14.1.1004 Description The issue allows attackers to execute malicious code through a DLL hijacking vulnerability. Recommendations For version 4.14.1.1004, at the moment, there is no information about a...
CVE-2020-24161: Uncontrolled Search Path Element
Guangzhou NetEase Mail Master 4.14.1.1004 on Windows has a DLL hijacking vulnerability. Attackers can use this vulnerability to execute malicious code...
Fedora: Security Advisory for thunderbird (FEDORA-2020-03fc9afe6a)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Nagios-Log-Server-2.1.7-Persistent-Cross-Site-Scripting
Nagios-Log-Server-2.1.7-Persistent-Cross-Site-Scripting A stor...
CVE-2020-12644
OX App Suite 7.10.3 and earlier allows SSRF, related to the mail account API and the /folder/list API...
CVE-2020-12644
OX App Suite 7.10.3 and earlier allows SSRF, related to the mail account API and the /folder/list API...
Server side request forgery (ssrf)
OX App Suite 7.10.3 and earlier allows SSRF, related to the mail account API and the /folder/list API...
CVE-2020-12644
CVE-2020-12644 affects OX App Suite 7.10.3 and earlier. The issue is a server-side request forgery (SSRF) related to the mail account API and the /folder/list endpoint, enabling network-access from the vulnerable system. CVSS data indicates a Network attack vector with Low complexity and Privileg...
CVE-2020-12644
OX App Suite 7.10.3 and earlier allows SSRF, related to the mail account API and the /folder/list API...
Chamber Dashboard Business Directory < 3.3.1 - Authenticated Stored Cross-Site Scripting
The plugin does not sanitise user input when creating or editing a business in the dashboard, allowing high privilege users Editor+ to set XSS payloads in various fields. Login as an editor or admin, then add/edit a business and set the phone number as " The payload will then be executed in the...