CVE-2017-16804

In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages...

[SECURITY] Fedora 27 Update: thunderbird-52.4.0-2.fc27

Mozilla Thunderbird is a standalone mail and newsgroup client...

[SECURITY] Fedora 27 Update: thunderbird-52.4.0-2.fc27

Mozilla Thunderbird is a standalone mail and newsgroup client...

CVE-2017-16659

The Gentoo mail-filter/assp package 1.9.8.13030 and earlier allows local users to gain privileges by leveraging access to the assp user account to install a Trojan horse /usr/share/assp/assp.pl script...

CVE-2017-16659

The Gentoo mail-filter/assp package 1.9.8.13030 and earlier allows local users to gain privileges by leveraging access to the assp user account to install a Trojan horse /usr/share/assp/assp.pl script...

Code injection

The Gentoo mail-filter/assp package 1.9.8.13030 and earlier allows local users to gain privileges by leveraging access to the assp user account to install a Trojan horse /usr/share/assp/assp.pl script...

CVE-2017-16659

The Gentoo mail-filter/assp package 1.9.8.13030 and earlier allows local users to gain privileges by leveraging access to the assp user account to install a Trojan horse /usr/share/assp/assp.pl script...

CVE-2017-16659

CVE-2017-16659 involves the Gentoo mail-filter/assp package (versions ≤ 1.9.8.13030). A local attacker who can access the assp user account can escalate privileges by installing a Trojan horse at /usr/share/assp/assp.pl, under the assp context. Connected documents also confirm this as a local-pri...

Gentoo mail-filter/assp package elevation of privilege vulnerability

The Gentoo mail-filter/assp package is an anti-spam package from the Gentoo Foundation. A security vulnerability exists in the Gentoo mail-filter/assp package version 1.9.8.13030 and earlier. A local attacker can exploit this vulnerability to gain privileges...

semcms web_mail multiple sql injection

No description provided by source...

[SECURITY] Fedora 26 Update: seamonkey-2.49.1-1.fc26

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

Ruby mail gem command injection vulnerability

Ruby is a cross-platform, object-oriented, dynamically typed programming language developed by Japanese software developer Yukihiro Matsumoto. mail gem is one of the e-mail processing libraries. A command injection vulnerability exists in Ruby mail gem versions prior to 2.5.5. The vulnerability c...

Suspicious Metadata Mail Phishing Containing Attachment - ver2

Mail attachment containing a malicious downloader was observed as part of ransomware campaigns. A remote attacker could send spam e-mails including those downloaders and convince users to manually enable them. This would allow the malicious code to run and infect the target system...

Xplico Remote Code Execution

This module exploits command injection vulnerability. Unauthenticated users can register a new account and then execute a terminal command under the context of the root user. The specific flaw exists within the Xplico, which listens on TCP port 9876 by default. The goal of Xplico is extract from ...

Razer US: Customer's e-mail disclosure

It was found that sharing saved cart to Facebook leaks the user e-mail, thus the audience can retrieve it from the link. We appreciate the contribution by @gdinar in helping keep Razer's online properties secure...

[SECURITY] Fedora 26 Update: thunderbird-52.4.0-2.fc26

Mozilla Thunderbird is a standalone mail and newsgroup client...

[SECURITY] Fedora 26 Update: procmail-3.22-44.fc26

Procmail can be used to create mail-servers, mailing lists, sort your incoming mail into separate folders/files real convenient when subscribing to one or more mailing lists or for prioritising your mail, preprocess your mail, start any programs upon mail arrival e.g. to generate different chimes...

[SECURITY] Fedora 25 Update: procmail-3.22-44.fc25

Procmail can be used to create mail-servers, mailing lists, sort your incoming mail into separate folders/files real convenient when subscribing to one or more mailing lists or for prioritising your mail, preprocess your mail, start any programs upon mail arrival e.g. to generate different chimes...

ArGoSoft Mini Mail Server Denial of Service Vulnerability

ArGoSoft Mini Mail Server is a full-featured mail server for Windows platform that supports POP3/SMTP/FINGER protocols. A denial of service vulnerability exists in ArGoSoft Mini Mail Server 1.0.0.2 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service...

GHSA-RP63-JFMW-532W Mail Gem Improper Input Validation vulnerability

The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a 1 sendmail or 2 exim delivery...