CVE-2022-26430

In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032521; Issue ID: ALPS07032521...

MediaTek mailbox 安全漏洞

MediaTek mailbox is a mailbox controller from MediaTek, a Chinese company. A security vulnerability exists in MediaTek mailbox that stems from a lack of boundary checking, which may allow out-of-bounds writes. This could result in a local privilege escalation that requires system execution...

MediaTek mailbox 缓冲区错误漏洞

MediaTek mailbox is a mailbox controller from MediaTek, a Chinese company. A buffer error vulnerability exists in MediaTek mailbox that stems from a lack of boundary checking, which could allow out-of-bounds writes. This could result in a local privilege escalation that requires system execution...

PT-2022-17840 · Mediatek +2 · Mt6833 +2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible out of bounds write in the mailbox due to a missing bounds check. This could lead to local escalation of privilege,...

PT-2022-17839 · Mediatek +2 · Mt6833 +2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned, so: Affected software affected versions not specified Description: The issue is related to a possible out of bounds write due to type confusion in the mailbox. This could lead to local escalatio...

PT-2022-17843 · Mediatek +2 · Mt6833 +2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned, so the information cannot be determined. Description: The issue is related to a possible out of bounds write in the mailbox due to a missing bounds check. This could lead to local escalation of...

PT-2022-17841 · Mediatek +2 · Mt6833 +2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned, so the information cannot be determined. Description: The issue is related to a possible out of bounds write in the mailbox due to a missing bounds check. This could lead to local escalation of...

CVE-2022-31138

mailcow is a mailserver suite. Prior to mailcow-dockerized version 2022-06a, an extended privilege vulnerability can be exploited by manipulating the custom parameters regexmess, skipmess, regexflag, delete2foldersonly, delete2foldersbutnot, regextrans2, pipemess, or maxlinelengthcmd to execute...

Privilege escalation

mailcow is a mailserver suite. Prior to mailcow-dockerized version 2022-06a, an extended privilege vulnerability can be exploited by manipulating the custom parameters regexmess, skipmess, regexflag, delete2foldersonly, delete2foldersbutnot, regextrans2, pipemess, or maxlinelengthcmd to execute...

Cross site scripting

Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting the HTTP Post request when sending an email and injecting a specially crafted XSS payload in the 'subject' field. The payload executes when the recipient logs...

Security Bulletin: IBM Sterling Global Mailbox is vulnerable to remote code execution due to Apache Log4j (CVE-2021-4104)

Summary Apache Log4j is used by IBM Sterling Global Mailbox as part of its logging infrastructure. This fix includes Apache Log4j v2.17.1. Vulnerability Details CVEID: CVE-2021-4104 DESCRIPTION: Apache Log4j could allow a remote attacker to execute arbitrary code on the system, caused by the...

Malicious code in voicemail-mailbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bc0683e7f3f0afa76661bc671c4e0b3fa44ecc5ec828f4a58ea3df2198c186e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6959 Malicious code in voicemail-mailbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bc0683e7f3f0afa76661bc671c4e0b3fa44ecc5ec828f4a58ea3df2198c186e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-31470

An XSS vulnerability in the indexmobilechangepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12 and 10.3.x before 10.3.3.47 allows attackers to run arbitrary Javascript code that, using an active end-user session for a logged-in user, can access and retrieve mailbox content...

CVE-2022-31470

An XSS vulnerability in the indexmobilechangepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12 and 10.3.x before 10.3.3.47 allows attackers to run arbitrary Javascript code that, using an active end-user session for a logged-in user, can access and retrieve mailbox content...

CVE-2022-31470

An XSS vulnerability in the indexmobilechangepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12 and 10.3.x before 10.3.3.47 allows attackers to run arbitrary Javascript code that, using an active end-user session for a logged-in user, can access and retrieve mailbox content...

Cross site scripting

An XSS vulnerability in the indexmobilechangepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12 and 10.3.x before 10.3.3.47 allows attackers to run arbitrary Javascript code that, using an active end-user session for a logged-in user, can access and retrieve mailbox content...

PT-2022-20748 · Axigen · Axigen Mobile Webmail

Name of the Vulnerable Software and Affected Versions: Axigen Mobile WebMail versions prior to 10.2.3.12 Axigen Mobile WebMail versions 10.3.x prior to 10.3.3.47 Description: The issue allows attackers to run arbitrary Javascript code, using an active end-user session for a logged-in user, to...

CVE-2022-31470

An XSS vulnerability in the indexmobilechangepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12 and 10.3.x before 10.3.3.47 allows attackers to run arbitrary Javascript code that, using an active end-user session for a logged-in user, can access and retrieve mailbox content...

Telecommunication Software SAMwin Contact Center Suite 安全漏洞

Telecommunication Software SAMwin Contact Center Suite is a highly versatile and flexible contact center software solution from Telecommunication Software. A security vulnerability exists in Telecommunication Software SAMwin Contact Center Suite version 5.1. The vulnerability stems from a conflic...