Command injection

Improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability in mail sending and receiving component in Synology Mail Station before 20211105-10315 allows remote authenticated users to execute arbitrary commands via unspecified vectors...

CVE-2021-43928

CVE-2021-43928 describes an OS command injection in Synology Mail Station’s mail sending/receiving component. The issue arises from improper neutralization of special elements, enabling remote authenticated users to execute arbitrary commands via unspecified vectors. Affected are Synology Mail St...

CVE-2021-43928

Improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability in mail sending and receiving component in Synology Mail Station before 20211105-10315 allows remote authenticated users to execute arbitrary commands via unspecified vectors...

Synology DiskStation Manager 操作系统命令注入漏洞

Synology Mail Station provides you with webmail service to access emails stored on your DiskStation. An OS command injection vulnerability exists in Synology Mail Station, which allows remote attackers to exploit the vulnerability to authenticate users to execute arbitrary commands via unspecifie...

Voltage SecureMail Server Business Logic Bypass Vulnerability

======================================================================= title: Business Logic Bypass - Mail Relay Post-authenticated product: Voltage SecureMail Server vulnerable version: Voltage SecureMail Server v7.3.0.1 fixed version: Voltage SecureMail Server v7.3.0.1 CVE number: CVE-2021-381...

CVE-2022-0218

The WP HTML Mail WordPress plugin is vulnerable to unauthorized access which allows unauthenticated attackers to retrieve and modify theme settings due to a missing capability check on the /themesettings REST-API endpoint found in the /includes/class-template-designer.php file, in versions up to...

CVE-2021-38130

A potential Information leakage vulnerability has been identified in versions of Micro Focus Voltage SecureMail Mail Relay prior to 7.3.0.1. The vulnerability could be exploited to create an information leakage attack...

Design/Logic Flaw

The WP HTML Mail WordPress plugin is vulnerable to unauthorized access which allows unauthenticated attackers to retrieve and modify theme settings due to a missing capability check on the /themesettings REST-API endpoint found in the /includes/class-template-designer.php file, in versions up to...

CVE-2022-0218

CVE-2022-0218 (WP HTML Mail ≤ 3.0.9) : WordPress Email Template Designer WP HTML Mail exposes an unprotected REST-API endpoint (/themesettings) due to a missing capability check in includes/class-template-designer.php, enabling unauthenticated users to retrieve/modify theme settings. Connected so...

CVE-2022-0218 WP HTML Mail <= 3.0.9 Missing Authorization on REST-API Route

The WP HTML Mail WordPress plugin is vulnerable to unauthorized access which allows unauthenticated attackers to retrieve and modify theme settings due to a missing capability check on the /themesettings REST-API endpoint found in the /includes/class-template-designer.php file, in versions up to...

CVE-2022-0218 WP HTML Mail <= 3.0.9 Missing Authorization on REST-API Route

The WP HTML Mail WordPress plugin is vulnerable to unauthorized access which allows unauthenticated attackers to retrieve and modify theme settings due to a missing capability check on the /themesettings REST-API endpoint found in the /includes/class-template-designer.php file, in versions up to...

CVE-2021-38130

A potential Information leakage vulnerability has been identified in versions of Micro Focus Voltage SecureMail Mail Relay prior to 7.3.0.1. The vulnerability could be exploited to create an information leakage attack...

[SECURITY] Fedora 35 Update: trojita-0.7.0.1-0.13.20220117git266c757.fc35

Trojit=EF=BF=BD=EF=BF=BD is a IMAP e-mail client which: Enables you to access your mail anytime, anywhere. Does not slow you down. If we can improve the productivity of an e-mail user, we better do. Respects open standards and facilitates modern technologies. We value the vendor-neutrality that...

[SECURITY] Fedora 34 Update: trojita-0.7.0.1-0.13.20220117git266c757.fc34

Trojit=EF=BF=BD=EF=BF=BD is a IMAP e-mail client which: Enables you to access your mail anytime, anywhere. Does not slow you down. If we can improve the productivity of an e-mail user, we better do. Respects open standards and facilitates modern technologies. We value the vendor-neutrality that...

Micro Focus Voltage SecureMail Server 安全漏洞

Micro Focus Voltage SecureMail Server is a Saas-secure email encryption solution from Micro Focus UK. A security vulnerability exists in Micro Focus Voltage SecureMail Mail Relay versions prior to 7.3.0.1, which stems from a lack of protection for sensitive information in the software. The...

Voltage SecureMail Server Business Logic Bypass

Security Advisory ======================================================================= title: Business Logic Bypass - Mail Relay Post-authenticated product: Voltage SecureMail Server vulnerable version: Voltage SecureMail Server v7.3.0.1 fixed version: Voltage SecureMail Server v7.3.0.1 CVE...

PT-2022-10694 · Micro Focus · Micro Focus Voltage Securemail Mail Relay +1

Name of the Vulnerable Software and Affected Versions: Micro Focus Voltage SecureMail Mail Relay versions prior to 7.3.0.1 Description: A potential information leakage issue has been identified. This could be exploited to create an information leakage attack. The issue is related to a business...

Security Bulletin: A security vulnerability has been identified in the IBM Spectrum Protect Client that affects multiple IBM Spectrum Protect products (CVE-2018-1786)

Summary The IBM Spectrum Protect formerly Tivoli Storage Manger Client/API is used as a component of IBM Spectrum Protect Snapshot formerly Tivoli Storage FlashCopy Manager for Windows, IBM Spectrum Protect for Databases, and IBM Spectrum Protect for Mail. Information about a security vulnerabili...

Security Bulletin: Security vulnerabilities have been identified in the IBM Spectrum Protect (formerly Tivoli Storage Manager) Client that affect multiple IBM Spectrum Protect (formerly Tivoli Storage Manager) products

Summary The IBM Spectrum Protect formerly Tivoli Storage Manager Client/API is used as a component of IBM Spectrum Protect Snapshot formerly Tivoli Storage FlashCopy Manager for Windows, IBM Spectrum Protect formerly Tivoli Storage Manager HSM for Windows, IBM Spectrum Protect formerly Tivoli...

WP HTML Mail Plugin for WordPress < 3.1 Cross-Site Scripting

The WordPress WP HTML Mail Plugin installed on the remote host is affected by a Cross-Site Scripting XSS vulnerability via an unprotected REST-API endpoint. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No sour...