Lucene search
+L

15554 matches found

OSV
OSV
added 2022/11/21 12:00 a.m.26 views

ALSA-2022:8561 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.5.0. Security Fixes: Mozilla: Service Workers might have learned size of cross-origin media files CVE-2022-45403 Mozilla: Fullscreen notification bypass CVE-2022-45404 Mozilla:...

9.8CVSS9.2AI score0.01061EPSS
SaveExploits0References28
NVD
NVD
added 2022/11/19 12:15 a.m.16 views

CVE-2022-4055

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attac...

7.4CVSS0.00659EPSS
SaveExploits1References1
OSV
OSV
added 2022/11/19 12:15 a.m.10 views

DEBIAN-CVE-2022-4055

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attac...

7.4CVSS7.3AI score0.00659EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
added 2022/11/19 12:15 a.m.42 views

CVE-2022-4055

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attac...

4.3CVSS2.2AI score0.00659EPSS
SaveExploits1
OSV
OSV
added 2022/11/19 12:15 a.m.9 views

UBUNTU-CVE-2022-4055

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attac...

7.4CVSS7.1AI score0.00659EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2022/11/19 12:15 a.m.376 views

CVE-2022-4055

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attac...

7.4CVSS7.1AI score0.00659EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/11/19 12:00 a.m.7 views

xdg-utils 安全漏洞

xdg-utils is a software from the xdg organization that provides integrated functionality for desktop systems. A security vulnerability exists in xdg-utils xdg-mail that stems from incorrect URL parsing when configured to use thunderbird's mailto URL, which may result in passing additional headers...

7.4CVSS7.2AI score0.00659EPSS
SaveExploits1References3
OSV
OSV
added 2022/11/18 11:15 p.m.11 views

CVE-2022-44740

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS5.8AI score0.00288EPSS
SaveExploits0References2
NVD
NVD
added 2022/11/18 11:15 p.m.23 views

CVE-2022-44740

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS0.00288EPSS
SaveExploits0References2
Prion
Prion
added 2022/11/18 11:15 p.m.21 views

Cross site request forgery (csrf)

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Creative Mail plugin = 1.5.4 on WordPress...

6.8CVSS8.9AI score0.00288EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/11/18 10:03 p.m.29 views

CVE-2022-44740 WordPress Creative Mail plugin <= 1.5.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Creative Mail plugin = 1.5.4 on WordPress...

5.4CVSS9.2AI score0.00288EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/11/18 10:03 p.m.9 views

CVE-2022-44740 WordPress Creative Mail plugin <= 1.5.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Creative Mail plugin = 1.5.4 on WordPress...

5.4CVSS7.4AI score0.00288EPSS
SaveExploits0References2
CVE
CVE
added 2022/11/18 10:03 p.m.75 views

CVE-2022-44740

The CVE-2022-44740 entry affects the WordPress Creative Mail plugin versions up to 1.5.4. The connected sources describe multiple Cross-Site Request Forgery (CSRF) vulnerabilities in this plugin, enabling attackers to trigger unwanted actions when a logged-in user interacts with the site. Reporte...

8.8CVSS7.4AI score0.00288EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/11/18 7:15 p.m.9 views

CVE-2022-40686

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS5.8AI score0.00271EPSS
SaveExploits0References1
NVD
NVD
added 2022/11/18 7:15 p.m.45 views

CVE-2022-40687

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS0.00714EPSS
SaveExploits0References1
NVD
NVD
added 2022/11/18 7:15 p.m.26 views

CVE-2022-40686

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS0.00271EPSS
SaveExploits0References1
OSV
OSV
added 2022/11/18 7:15 p.m.19 views

CVE-2022-40687

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

8.8CVSS5.8AI score0.00714EPSS
SaveExploits0References1
Prion
Prion
added 2022/11/18 7:15 p.m.18 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

6.8CVSS8.8AI score0.00714EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/11/18 7:15 p.m.20 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Creative Mail plugin = 1.5.4 on WordPress...

6.8CVSS8.8AI score0.00271EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/11/18 6:47 p.m.72 views

CVE-2022-40687

CVE-2022-40687 affects the WordPress Creative Mail plugin (versions

8.8CVSS7AI score0.00714EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder