Lucene search
+L

15546 matches found

OpenVAS
OpenVAS
added 2023/10/10 12:00 a.m.35 views

Fedora: Security Advisory for exim (FEDORA-2023-42313af0de)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7AI score0.28084EPSS
SaveExploits5References2
Fedora
Fedora
added 2023/10/09 1:27 a.m.43 views

[SECURITY] Fedora 37 Update: exim-4.96.1-1.fc37

Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...

9.8CVSS6.4AI score0.28084EPSS
SaveExploits5
Fedora
Fedora
added 2023/10/07 1:45 a.m.19 views

[SECURITY] Fedora 38 Update: thunderbird-115.3.1-1.fc38

Mozilla Thunderbird is a standalone mail and newsgroup client...

7.1AI score
SaveExploits0
Fedora
Fedora
added 2023/10/06 12:51 a.m.18 views

[SECURITY] Fedora 37 Update: thunderbird-102.15.1-1.fc37

Mozilla Thunderbird is a standalone mail and newsgroup client...

7.1AI score
SaveExploits0
OSV
OSV
added 2023/10/05 9:35 p.m.33 views

RLSA-2023:5435 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.3.1. Security Fixes: firefox: use-after-free in workers CVE-2023-3600 Mozilla: Out-of-bounds write in PathOps CVE-2023-5169 Mozilla: Use-after-free in Ion Compiler CVE-2023-5171 Mozilla:...

9.8CVSS9.5AI score0.49013EPSS
SaveExploits3References6
Ubuntu
Ubuntu
added 2023/10/04 1:41 p.m.55 views

USN-6411-1: Exim vulnerabilities

It was discovered that Exim incorrectly handled certain challenge requests. A remote attacker could possibly use this issue to perform out-of-bounds reads, resulting in information leakage. CVE-2023-42114 It was discovered that Exim incorrectly handled validation of user-supplied data. A remote...

9.8CVSS7.8AI score0.28084EPSS
SaveExploits5
RedHat Linux
RedHat Linux
added 2023/10/04 11:38 a.m.50 views

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

9.8CVSS7.5AI score0.49013EPSS
SaveExploits3References6
OSV
OSV
added 2023/10/04 2:15 a.m.12 views

CVE-2023-3213

The WP Mail SMTP Pro plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the isprintpage function in versions up to, and including, 3.8.0. This makes it possible for unauthenticated attackers to disclose potentially sensitive email information...

5.3CVSS7.3AI score0.00429EPSS
SaveExploits0References2
Prion
Prion
added 2023/10/04 2:15 a.m.30 views

Design/Logic Flaw

The WP Mail SMTP Pro plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the isprintpage function in versions up to, and including, 3.8.0. This makes it possible for unauthenticated attackers to disclose potentially sensitive email information...

5CVSS5.3AI score0.00429EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/10/04 1:52 a.m.41 views

CVE-2023-3213 WP Mail SMTP Pro <= 3.8.0 - Missing Authorization to Information Dislcosure via is_print_page

The WP Mail SMTP Pro plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the isprintpage function in versions up to, and including, 3.8.0. This makes it possible for unauthenticated attackers to disclose potentially sensitive email information...

5.3CVSS5.3AI score0.00429EPSS
SaveExploits0References2
CVE
CVE
added 2023/10/04 1:52 a.m.66 views

CVE-2023-3213

CVE-2023-3213 affects the WordPress plugin WP Mail SMTP Pro . The vulnerability stems from a missing capability check in the function used to render the print page, allowing unauthenticated users to access potentially sensitive email information. Affected versions are up to and including 3.8.0 . ...

5.3CVSS5.3AI score0.00429EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/04 12:00 a.m.10 views

The vulnerability of the Exim SMTP mail server allows a hacker to execute arbitrary code.

The vulnerability of the Exim mail server’s SMTP service is related to the execution of operations beyond the buffer boundaries in memory, as a result of incorrect processing of special elements. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

8.1CVSS8.4AI score0.0572EPSS
SaveExploits0References15Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/10/04 12:00 a.m.11 views

The vulnerability of the SMTP protocol implementation in a mail server allows a hacker to execute arbitrary code.

The vulnerability of the SMTP protocol implementation in email servers is related to the execution of operations beyond the buffer boundaries in memory when processing requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.1CVSS8.7AI score0.03158EPSS
SaveExploits2References14Affected Software5
CNNVD
CNNVD
added 2023/10/04 12:00 a.m.10 views

WordPress Plugin WP Mail SMTP Pro Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.6AI score0.00429EPSS
SaveExploits0References3
Drupal
Drupal
added 2023/10/04 12:00 a.m.49 views

Mail Login - Moderately critical - Access bypass - SA-CONTRIB-2023-048

This module enables users to log in by email address with minimal configurations. Drupal core contains protection against brute force attacks via a flood control mechanism. This module's functionality did not replicate the flood control, enabling brute force attacks. A previous security advisory,...

6.7AI score
SaveExploits0References12
BDU FSTEC
BDU FSTEC
added 2023/10/04 12:00 a.m.9 views

The vulnerability of the Exim SMTP mail server allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Exim mail server’s SMTP service is related to the issue of operations going beyond the buffer in memory when implementing a DNSDB-style search mechanism. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected...

3.1CVSS7AI score0.01606EPSS
SaveExploits0References16Affected Software5
AlmaLinux
AlmaLinux
added 2023/10/04 12:00 a.m.72 views

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.3.1. Security Fixes: firefox: use-after-free in workers CVE-2023-3600 Mozilla: Out-of-bounds write in PathOps CVE-2023-5169 Mozilla: Use-after-free in Ion Compiler CVE-2023-5171 Mozilla:...

9.8CVSS8.5AI score0.49013EPSS
SaveExploits3References12
BDU FSTEC
BDU FSTEC
added 2023/10/04 12:00 a.m.11 views

The vulnerability of the NTLM (New Technology LAN Manager) protocol implemented by the Exim mail server allows a hacker to gain unauthorized access to protected information.

The vulnerability of the NTLM New Technology LAN Manager protocol implemented by the Exim mail server is related to the occurrence of operations outside the buffer in memory during request processing. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized acce...

3.7CVSS7.2AI score0.28084EPSS
SaveExploits0References15Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/10/04 12:00 a.m.13 views

The vulnerability of the SMTP mail server service in Exim allows a hacker to execute arbitrary code.

The vulnerability of the Exim mail server’s SMTP service relates to the ability to write data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by injecting the AUTHOR command remotely...

10CVSS8.6AI score0.09961EPSS
SaveExploits5References10Affected Software4
NVD
NVD
added 2023/10/03 1:15 p.m.43 views

CVE-2023-40202

Cross-Site Request Forgery CSRF vulnerability in Hannes Etzelstorfer // codemiq WP HTML Mail plugin = 3.4.1 versions...

8.8CVSS6.4AI score0.00246EPSS
SaveExploits0References1
Rows per page
Query Builder