15546 matches found
Remote Code Execution (RCE)
zend-mail is vulnerable to remote code execution RCE attacks. The library does not properly sanitize input, allowing a malicious user to inject and execute arbitrary code using a \ character...
Allow Secure Mail to open links to iOS passbook (wallet)
Unable to connect to the Secure Mail iOS to iOS wallet...
Apache Pony Mail Security Bypass Vulnerability
Apache Pony Mail is a plugin with mail archiving, viewing and interaction features. A security vulnerability exists in Apache Pony Mail that allows an attacker to submit special requests to bypass authentication...
Authentication flaw
Apache Pony Mail 0.6c through 0.8b allows remote attackers to bypass authentication...
CVE-2016-4460
Apache Pony Mail 0.6c through 0.8b allows remote attackers to bypass authentication...
CVE-2016-4460
Apache Pony Mail 0.6c through 0.8b allows remote attackers to bypass authentication...
CVE-2016-4460
Apache Pony Mail 0.6c through 0.8b allows remote attackers to bypass authentication...
CVE-2016-4460
Apache Pony Mail versions 0.6c through 0.8b are affected by a vulnerability that allows remote attackers to bypass authentication. The reports consolidate this as a security bypass without detailing the underlying root cause in the provided documents. No remediation steps, patch versions, or expl...
After updating the app, receiving an error : Incompatible error
After updating the app Secure Mail, receiving an error when launching apps. Devices: iOS only ERROR: "Incompatible app, please try removing this app and then reinstalling it."...
Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2017-25383)
Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin boards, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. A cross-site scripting...
Updated clamav packages fix security vulnerabilities
It was discovered that ClamAV incorrectly handled parsing certain e-mail messages. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service CVE-2017-6418. It was discovered that ClamAV incorrectly handled parsing certain PE files with WWPack...
Multiple vulnerabilities in Cybozu Garoon
Overview Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. Denial-of-service DoS vulnerability in the application menu's edit function CWE-20 - CVE-2017-2254 Stored cross-site scripting in the "Rich text" function of the application "Space" CWE-79 -...
Ubuntu 14.04 LTS / 16.04 LTS : ClamAV vulnerabilities (USN-3393-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3393-1 advisory. It was discovered that ClamAV incorrectly handled parsing certain e-mail messages. A remote attacker could possibly use this issue to cause...
USN-3393-2: ClamAV vulnerabilities
USN-3393-1 fixed several vulnerabilities in ClamAV. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: It was discovered that ClamAV incorrectly handled parsing certain e-mail messages. A remote attacker could possibly use this issue to cause ClamAV to...
Legal Robot: Tampering the mail id on chatbox
hi sir , i found a vulnerability i.e tampering the data . steps to reproduce 1 login to https://app.legalrobot-uat.com 2 open https://app.legalrobot-uat.com/account 3 at right side bottom corner , there is a chat symbol. 4 just enter the message there , and capture the request using burpsuite and...
Mail.ru: filin.mail.ru user's e-mail address disclosure
Здравствуйте! Данный проект участвует в программе баунти? Я нашла проблему проекта вопросы/ответы. На сколько мне известно, то в данном проекте доступным является только ИД пользователя и его НИК для общего просмотра, НО можно посмотреть адрес почты каждого участника проекта дает адрес почты данн...
CVE-2017-10208
Vulnerability in the Oracle Hospitality e7 component of Oracle Hospitality Applications subcomponent: Other. The supported version that is affected is 4.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via SMTP to compromise Oracle Hospitality e7. Successfu...
CVE-2017-10031
Vulnerability in the Oracle Communications Convergence component of Oracle Communications Applications subcomponent: Mail Proxy dojo. Supported versions that are affected are 3.0 and 3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2017-10031
Vulnerability in the Oracle Communications Convergence component of Oracle Communications Applications subcomponent: Mail Proxy dojo. Supported versions that are affected are 3.0 and 3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...