Parameter Injection

zend-mail is vulnerable to Parameter Injection. The vulnerability is due to unsanitized additional quote characters within an address in the file Sendmail.php, which allows an attacker to inject arbitrary parameters to the system sendmail program...

The vulnerability of the ParseAddressList function in the net/mail package in the Go programming language, which allows attackers to perform spoofing attacks.

The vulnerability of the ParseAddressList function in the net/mail package in the Go programming language is related to insufficient checking of the names displayed by this function. Exploitation of this vulnerability could allow a malicious actor to perform spear-phishing attacks by sending...

golang: net/mail: comments in display names are incorrectly handled

A flaw was found in Go's net/mail standard library package. The ParseAddressList function incorrectly handles comments text within parentheses within display names. Since this is a misalignment with conforming address parsers, it can result in different trust decisions made by programs using...

MAL-2024-7015 Malicious code in royal-mail_scraper (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in royal-mail_api (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in alerty_plugin-mail (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6554 Malicious code in alerty_plugin-mail (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4539 Malicious code in Mail (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Mail (NuGet)

--- -= Per source details. Do not edit below this line.=-...

[SECURITY] Fedora 39 Update: thunderbird-115.12.1-1.fc39

Mozilla Thunderbird is a standalone mail and newsgroup client...

EulerOS 2.0 SP11 : emacs (EulerOS-SA-2024-1830)

According to the versions of the emacs package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.CVE-2024-30205 In Emacs before...

CVE-2024-30848

Cross-site scripting XSS vulnerability in SilverSky E-mail service version 5.0.3126 allows remote attackers to inject arbitrary web script or HTML via the version parameter...

ALSA-2024:4036 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.12.1. Security Fixes: thunderbird: Use-after-free in networking CVE-2024-5702 thunderbird: Use-after-free in JavaScript object transplant CVE-2024-5688 thunderbird: External protocol...

CVE-2024-30848

CVE-2024-30848 affects SilverSky E-mail service, version 5.0.3126. A cross-site scripting (XSS) flaw allows remote attackers to inject arbitrary web script or HTML via the version parameter. Publicly available sources (NVD/Red Hat/CNNVD) corroborate the same description. The documents do not spec...

CVE-2024-30848

Cross-site scripting XSS vulnerability in SilverSky E-mail service version 5.0.3126 allows remote attackers to inject arbitrary web script or HTML via the version parameter...

CVE-2024-30848

Cross-site scripting XSS vulnerability in SilverSky E-mail service version 5.0.3126 allows remote attackers to inject arbitrary web script or HTML via the version parameter...

CVE-2024-38462

iRODS before 4.3.2 provides an msiSendMail function with a problematic dependency on the mail binary, such as in the mailMS.cppL94-L106 reference...

[SECURITY] Fedora 40 Update: thunderbird-115.12.0-2.fc40

Mozilla Thunderbird is a standalone mail and newsgroup client...

CVE-2024-38462

iRODS before 4.3.2 contains a vulnerability in msiSendMail with a problematic dependency on the mail binary (mailMS.cpp#L94-L106). Affected: versions prior to 4.3.2. Remediation: upgrade to 4.3.2 or later. No exploitation details are provided in the documents.

PT-2024-28018 · Irods · Irods

Name of the Vulnerable Software and Affected Versions: iRODS versions prior to 4.3.2 Description: The issue concerns a problematic dependency on the mail binary in the msiSendMail function. This function is referenced in mailMS.cppL94-L106. Recommendations: For versions prior to 4.3.2, update to...