编号撤回

Mozilla Thunderbird is a suite of e-mail client software from the Mozilla Foundation in the United States that is separate from the Mozilla Application Suite. The software supports the IMAP and POP mail protocols as well as the HTML mail format. This CVE number has been withdrawn...

Alibaba Cloud Linux 3 : 0095: evolution (ALINUX3-SA-2022:0095)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0095 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2019-3890: It was discovered...

PT-2025-23249 · Freescout · Freescout

Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.180 Description: The issue is related to Cross-Site Scripting XSS attacks due to incorrect input validation and sanitization of user-input data during mail signature sanitization. An attacker can inject arbitra...

Umbraco Forms 安全漏洞

Umbraco Forms is a form builder from Umbraco. A security vulnerability exists in Umbraco Forms versions 7.x through 13.4.2 and prior to 15.1.2, which stems from a Send Mail workflow that does not HTML-encode user-supplied field values, which could lead to a bypass of spam and email client securit...

CVE-2025-46611

Cross Site Scripting vulnerability in ARTEC EMA Mail v6.92 allows an attacker to execute arbitrary code via a crafted script...

CVE-2025-46610

ARTEC EMA Mail 6.92 allows CSRF...

CVE-2025-46611

Cross Site Scripting vulnerability in ARTEC EMA Mail v6.92 allows an attacker to execute arbitrary code via a crafted script...

CVE-2025-46610

ARTEC EMA Mail 6.92 allows CSRF...

firefox: thunderbird: Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run...

ARTEC EMA Mail 安全漏洞

ARTEC EMA Mail is an enterprise-class encrypted mail system from ARTEC. A security vulnerability exists in ARTEC EMA Mail version v6.92, which stems from vulnerability to cross-site scripting attacks that could lead to the execution of arbitrary code...

CVE-2025-46610

ARTEC EMA Mail 6.92 allows CSRF...

CVE-2025-46610

CVE-2025-46610 relates to ARTEC EMA Mail 6.92, which is reported vulnerable to CSRF. The CVSS data indicates a high-severity issue with a network attack vector (AV:N), requiring user interaction (UI:R) and no privileges (PR:N), with fully high impact on confidentiality, integrity, and availabilit...

PT-2025-20702 · Artec · Artec Ema Mail

Name of the Vulnerable Software and Affected Versions: ARTEC EMA Mail version 6.92 Description: The issue allows an attacker to execute arbitrary code via a crafted script. This is a Cross Site Scripting vulnerability. Recommendations: For ARTEC EMA Mail version 6.92, at the moment, there is no...

CVE-2025-46610

ARTEC EMA Mail 6.92 allows CSRF...

PT-2025-20701 · Artec · Artec Ema Mail

Name of the Vulnerable Software and Affected Versions: ARTEC EMA Mail version 6.92 Description: The issue allows Cross-Site Request Forgery CSRF. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...

CVE-2025-46611

Cross Site Scripting vulnerability in ARTEC EMA Mail v6.92 allows an attacker to execute arbitrary code via a crafted script...

CVE-2025-46611

CVE-2025-46611 : ARTEC EMA Mail (v6.92) is affected by a Cross‑Site Scripting flaw that allows an attacker to execute arbitrary code via a crafted script, per the CVE description. The issue stems from an XSS vulnerability in EMA Mail 6.92 (root cause as stated in the sources). The provided metric...

CVE-2025-46611

Cross Site Scripting vulnerability in ARTEC EMA Mail v6.92 allows an attacker to execute arbitrary code via a crafted script...

ARTEC EMA Mail 安全漏洞

ARTEC EMA Mail is an enterprise-class encrypted mail system from ARTEC. A security vulnerability exists in ARTEC EMA Mail version 6.92 that stems from vulnerability to cross-site request forgery attacks...

CVE-2025-47466

Cross-Site Request Forgery CSRF vulnerability in Rustaurius Ultimate WP Mail ultimate-wp-mail allows Cross Site Request Forgery.This issue affects Ultimate WP Mail: from n/a through = 1.3.4...