15484 matches found
OrangeHRM Arbitrary Command Injection Vulnerability
OrangeHRM is a human resource management system HRM from OrangeHRM, Inc. in the United States. The system supports personnel information management, leave management, attendance management and recruitment management. A command injection vulnerability exists in admin/listMailConfiguration in...
Coremail Mail System Service Interface Parameter Injection Vulnerability
Coremail mail system is a large-scale enterprise mail system independently researched and developed by Lonker Technology Guangzhou Co., Ltd hereinafter referred to as Lonker, which provides customers with overall technical solutions for e-mail and enterprise post office operation services.As the...
Coremail Mail System Service Unauthorized Access Vulnerability
Coremail mail system is a large-scale enterprise mail system independently researched and developed by Lonker Technology Guangzhou Co., Ltd hereinafter referred to as Lonker, which provides customers with overall technical solutions for e-mail and enterprise post office operation services.As the...
Exim Mail Server Remote Code Execution (CVE-2019-10149)
A remote code execution vulnerability exists in Exim Mail Server. A remote attacker can exploit this issue by sending a specially crafted packet to the target server. Successful exploitation could result in execution of arbitrary code on the affected system...
Joruri Mail Input Validation Error Vulnerability
Joruri Mail is a set of IMAP e-mail client software written using Ruby/Rails . An input validation error vulnerability exists in Joruri Mail 2.1.4 and prior versions, which arises from a network system or product that does not properly validate incoming data and can be exploited by a remote...
Multiple vulnerabilities in Joruri Mail
Overview Joruri Mail provided by SiteBridge Inc. contains multiple vulnerabilities listed below. Open Redirect CWE-601 - CVE-2019-5965 Session Management CWE-639 - CVE-2019-5966 Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated...
Debian DSA-4456-1 : exim4 - security update
The Qualys Research Labs reported a flaw in Exim, a mail transport agent. Improper validation of the recipient address in the delivermessage function may result in the execution of arbitrary commands. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
Fedora Update for cyrus-imapd FEDORA-2019-309f559057
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
JVN#58052567: Multiple vulnerabilities in Joruri Mail
Joruri Mail provided by SiteBridge Inc. contains multiple vulnerabilities listed below. Open Redirect CWE-601 - CVE-2019-5965 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N| Base Score: 4.7 CVSS v2| AV:N/AC:H/Au:N/C:N/I:P/A:N| Base Score: 2.6 Session...
Joruri Mail Authorization Issues Vulnerability
Joruri Mail is a set of IMAP e-mail client software written using Ruby/Rails . A security vulnerability exists in Joruri Mail 2.1.4 and earlier versions. An attacker can exploit this vulnerability to spoof arbitrary users and modify or disclose information...
Exim 4.87 < 4.92 Remote Command Execution
According to its banner, the version of Exim running on the remote host is between 4.87 and 4.91 inclusive. It is, therefore, potentially affected by a remote command execution vulnerability. A flaw exists in the delivermessage function that could allow an attacker to execute arbitrary commands v...
Debian: Security Advisory (DSA-4456-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 4456-1] exim4 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4456-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 05, 2019 https://www.debian.org/security/faq -...
USN-4010-1: Exim vulnerability
It was discovered that Exim incorrectly handled certain decoding operations. A remote attacker could possibly use this issue to execute arbitrary commands...
IceWarp Mail Server Path Traversal Vulnerability (CNVD-2019-16516)
IceWarp Mail Server is a mail server product from IceWarp USA. The product supports email archiving, SmartAttach attachments, automatic migration and more. A path traversal vulnerability exists in IceWarp Mail Server version 10.4.4 and earlier. The vulnerability stems from a failure of a network...
Exim 4.87 < 4.91 - (Local / Remote) Command Execution
Qualys Security Advisory The Return of the WIZard: RCE in Exim CVE-2019-10149 ======================================================================== Contents ======================================================================== Summary Local exploitation Remote exploitation - Non-default...
Exim 4.87 4.91 - (Local Remote) Command Execution
Exim 4.87 4.91 - Local Remote Command Execution Qualys Security Advisory The Return of the WIZard: RCE in Exim CVE-2019-10149 ======================================================================== Contents ======================================================================== Summary Local...
CVE-2019-12593
IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail/calendar/minimizer/index.php?style=..%5c directory traversal...
