15321 matches found
[SECURITY] Fedora 36 Update: thunderbird-102.7.1-2.fc36
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 37 Update: thunderbird-102.7.1-2.fc37
Mozilla Thunderbird is a standalone mail and newsgroup client...
CVE-2022-45807
Cross-Site Request Forgery CSRF in WPVibes WP Mail Log plugin = 1.0.1 versions...
CVE-2022-45807
Cross-Site Request Forgery CSRF in WPVibes WP Mail Log plugin = 1.0.1 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF in WPVibes WP Mail Log plugin = 1.0.1 versions...
CVE-2022-45807 WordPress WP Mail Log Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF in WPVibes WP Mail Log plugin = 1.0.1 versions...
CVE-2022-45807 WordPress WP Mail Log Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF in WPVibes WP Mail Log plugin = 1.0.1 versions...
CVE-2022-45807
CVE-2022-45807 is a CSRF vulnerability in the WPVibes WP Mail Log plugin, affecting versions <= 1.0.1. The NVD entry reports a CVSS v3.1 base score of 8.8 (HIGH) with network attack vector, requiring user interaction and no privileges, and impact to confidentiality, integrity, and availability...
WordPress Plugin WP Mail Log 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
PT-2023-14759 · Wpvibes · Wpvibes Wp Mail Log
Name of the Vulnerable Software and Affected Versions: WPVibes WP Mail Log plugin versions 1.0.1 and earlier Description: The issue is related to Cross-Site Request Forgery CSRF in the WPVibes WP Mail Log plugin. This means an attacker can trick a user into performing unintended actions on a web...
Hackers Abused Microsoft's "Verified Publisher" OAuth Apps to Breach Corporate Email Accounts
Microsoft on Tuesday said it took steps to disable fake Microsoft Partner Network MPN accounts that were used for creating malicious OAuth applications as part of a phishing campaign designed to breach organizations' cloud environments and steal email. "The applications created by these fraudulen...
PT-2023-24200 · Nextcloud +1 · Nextcloud Calendar +1
Name of the Vulnerable Software and Affected Versions: Nextcloud Calendar app versions prior to 3.5.5 Nextcloud Calendar app versions prior to 4.2.3 Description: The issue concerns the disclosure of internal website paths when the SMTP server is unavailable. This affects the functionality of the...
Fedora: Security Advisory for seamonkey (FEDORA-2023-dfeb282345)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Thunderbird 安全漏洞
Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols, and HTML mail format. A security vulnerability exists in Mozilla Thunderbird. An attacker exploiting this...
RLSA-2023:0476 Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.7.1. Security Fixes: Mozilla: libusrsctp library out of date CVE-2022-46871 Mozilla: Arbitrary file read from GTK drag and drop on Linux CVE-2023-23598 Mozilla: Memory safety bugs fixed ...
RLSA-2023:0463 Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.7.1. Security Fixes: Mozilla: libusrsctp library out of date CVE-2022-46871 Mozilla: Arbitrary file read from GTK drag and drop on Linux CVE-2023-23598 Mozilla: Memory safety bugs fixed ...
important E-Mail Input Field bypassed allowing Account Lockout and Takeover
Dear Ladies and Gentlemen, First of all, thank you for your time and effort in reading my Report. While doing the Penetration Test my Brother Josef Hassan [email protected] and I were able to Account Lockout Vulnerability by bypassing the Input of the E-Mail Address. The Process of...
PT-2023-1266 · Mozilla +9 · Thunderbird +9
Name of the Vulnerable Software and Affected Versions: Thunderbird versions 68 through 102.7.0 Description: The issue is related to errors in checking the S/Mime signature's OCSP certificate revocation status. This could allow a remote attacker to implement a spoofing attack. Mail signed with a...
Security Vulnerabilities fixed in Thunderbird 102.7.1 — Mozilla
Certificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed with a revoked certificate would be displayed as having a valid signature. Thunderbird versions from 68 to 102.7.0 were affected by this bug...
About the security content of iOS 15.7.3 and iPadOS 15.7.3
About the security content of iOS 15.7.3 and iPadOS 15.7.3 This document describes the security content of iOS 15.7.3 and iPadOS 15.7.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...