15539 matches found
The vulnerability in the web console of the Kaspersky Secure Mail Gateway security tool, which allows access to the root user rights.
The vulnerability of the Kaspersky Secure Mail Gateway web console relates to deficiencies in the process of eliminating special elements from the output data used by the incoming component. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain root user privilege...
The vulnerability in the web console of the Kaspersky Secure Mail Gateway protection tool allows for XSS attacks to be carried out.
The vulnerability of the Kaspersky Secure Mail Gateway web console protection tool is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain root access to the attacked system using a...
CVE-2018-0514
MP Form Mail CGI eCommerce Edition Ver 2.0.13 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors...
CVE-2018-0514
MP Form Mail CGI eCommerce Edition Ver 2.0.13 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors...
CVE-2018-0514
MP Form Mail CGI eCommerce Edition (futomi Co., Ltd.) is vulnerable to OS command injection (CWE-78). Affected: Ver 2.0.13 and earlier. Impact: remote attacker may execute arbitrary OS commands. Root cause: OS command injection in the CGI that handles web form mail. Remediation: update to the lat...
MP Form Mail CGI eCommerce Edition vulnerable to OS command injection
Overview MP Form Mail CGI eCommerce Edition provided by futomi Co., Ltd. is a CGI used to send mail from a web form. MP Form Mail CGI eCommerce Edition contains an OS command injection vulnerability CWE-78. Daiki Ichinose of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA...
Kaspersky Secure Mail Gateway Cross-Site Request Forgery Vulnerability
Kaspersky Secure Mail Gateway is an email security solution from Russia's Kaspersky Lab. The program is able to automatically filter spam, phishing sites and various malicious attachments. A cross-site request forgery vulnerability exists in Kaspersky Secure Mail Gateway version 1.1. A remote...
UBUNTU-CVE-2018-6789
An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely...
Kaspersky Secure Mail Gateway Configuration File Injection Vulnerability
Kaspersky Secure Mail Gateway is an email security solution from Russia's Kaspersky Lab. The program is able to automatically filter spam, phishing sites and various malicious attachments. A security vulnerability exists in Kaspersky Secure Mail Gateway version 1.1. An attacker can exploit the...
Kaspersky Secure Mail Gateway Local Elevation of Privilege Vulnerability
Kaspersky Secure Mail Gateway is a suite of email security solutions from Russia's Kaspersky Lab. Kaspersky Secure Mail Gateway suffers from a security vulnerability that allows a local attacker to exploit the vulnerability by submitting special requests for elevated privileges...
Kaspersky Secure Mail Gateway Cross-Site Scripting Vulnerability
Kaspersky Secure Mail Gateway is an email security solution from Russia's Kaspersky Lab. The program is able to automatically filter spam, phishing sites and various malicious attachments. A cross-site scripting vulnerability exists in Kaspersky Secure Mail Gateway version 1.1. A remote attacker...
[SECURITY] Fedora 27 Update: thunderbird-52.6.0-1.fc27
Mozilla Thunderbird is a standalone mail and newsgroup client...
CVE-2018-6288
Cross-site Request Forgery leading to Administrative account takeover in Kaspersky Secure Mail Gateway version 1.1...
Privilege escalation
Local Privilege Escalation in Kaspersky Secure Mail Gateway version 1.1...
Design/Logic Flaw
Configuration file injection leading to Code Execution as Root in Kaspersky Secure Mail Gateway version 1.1...
CVE-2018-6289
Configuration file injection leading to Code Execution as Root in Kaspersky Secure Mail Gateway version 1.1...
CVE-2018-6290
Local Privilege Escalation in Kaspersky Secure Mail Gateway version 1.1...
CVE-2018-6290
Local Privilege Escalation in Kaspersky Secure Mail Gateway version 1.1...