CVE-2023-23657

CVE-2023-23657 describes a Stored XSS in the WordPress plugin Mail Subscribe List up to version 2.1.9. No technical details (payloads, vectors, affected files, or fix/version) are provided in the supplied documents. Monitor for vendor advisories and patch updates.

Moderate: Red Hat Security Advisory: emacs security and bug fix update

An update for emacs is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

PT-2023-19106 · Richard Leishman · Webforward Mail Subscribe List Plugin

Name of the Vulnerable Software and Affected Versions: Richard Leishman t/a Webforward Mail Subscribe List plugin versions 2.1.9 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the Richard Leishman t/a Webforward Mail Subscribe List...

WordPress plugin Mail Subscribe List 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

[SECURITY] Fedora 37 Update: thunderbird-102.11.0-1.fc37

Mozilla Thunderbird is a standalone mail and newsgroup client...

Python <= 2.7.18, 3.x <= 3.12.3 Security Bypass Vulnerability - Windows

Python is prone to a security bypass vulnerability in the e-mail module. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Python <= 2.7.18, 3.x <= 3.12.3 Security Bypass Vulnerability - Mac OS X

Python is prone to a security bypass vulnerability in the e-mail module. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2023-31445

Cassia Access controller before 2.1.1.2203171453, was discovered to have a unprivileged -information disclosure vulnerability that allows read-only users have the ability to enumerate all other users and discover e-mail addresses, phone numbers, and privileges of all other users...

CVE-2023-31183

Cybonet PineApp Mail Secure A reflected cross-site scripting XSS vulnerability was identified in the product, using an unspecified endpoint...

CVE-2023-31183

Cybonet PineApp Mail Secure A reflected cross-site scripting XSS vulnerability was identified in the product, using an unspecified endpoint...

Cross site scripting

Cybonet PineApp Mail Secure A reflected cross-site scripting XSS vulnerability was identified in the product, using an unspecified endpoint...

CVE-2023-31183 Cybonet PineApp Mail Secure RXSS vulnerability

Cybonet PineApp Mail Secure A reflected cross-site scripting XSS vulnerability was identified in the product, using an unspecified endpoint...

CVE-2023-31183

CVE-2023-31183 affects Cybonet PineApp Mail Secure. A reflected cross-site scripting (XSS) vulnerability identified in the product, involving an unspecified endpoint. The public entries describe the issue but do not specify affected versions, exploit details, or a patch. CVSS 3.1 base score 6.1 (...

PT-2023-23210 · Cybonet · Cybonet Pineapp Mail Secure

Name of the Vulnerable Software and Affected Versions: Cybonet PineApp Mail Secure affected versions not specified Description: A reflected cross-site scripting XSS vulnerability was identified in the product, using an unspecified endpoint. Recommendations: At the moment, there is no information...

CVE-2023-31183 Cybonet PineApp Mail Secure RXSS vulnerability

Cybonet PineApp Mail Secure A reflected cross-site scripting XSS vulnerability was identified in the product, using an unspecified endpoint...

Cybonet PineApp Mail Secure 跨站脚本漏洞

Cybonet PineApp Mail Secure from Israel's Cybonet blocks most malicious email threats at the network perimeter while providing a range of additional options for comprehensive security and message control. A security vulnerability exists in Cybonet PineApp Mail Secure that stems from the use of...

PT-2023-23703 · Mymail · Mymail

Name of the Vulnerable Software and Affected Versions: myMail app versions through 14.30 for iOS Description: The issue concerns the myMail app sending cleartext credentials in a situation where STARTTLS is expected by a server. This occurs when the app is used with a server that expects a secure...

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system from the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in versions prior to phpMyFAQ 3.1.13, which stems from a stored XSS vulnerability in PhpMyFaq where the mail parameter accepts unfiltered user...

[SECURITY] [DSA 5396-2] evolution update

------------------------------------------------------------------------- Debian Security Advisory DSA-5396-2 [email protected] https://www.debian.org/security/ Alberto Garcia May 04, 2023 https://www.debian.org/security/faq -...

WordPress WPO365 | Mail Integration for Office 365 / Outlook Plugin <= 1.9.0 is vulnerable to Cross Site Scripting (XSS)

Software WPO365 | Mail Integration for Office 365 / Outlook Type Plugin Vulnerable versions = 1.9.0 Fixed in 1.9.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32119 Patch priority Medium CVSS severity Medium 5.8 Developer Claim ownership PSID...