24 matches found
EUVD-2020-19099
Malware in sbrugna...
EUVD-2019-8831
Malware in sbrugna...
EUVD-2019-8832
Malware in sbrugna...
CVE-2019-19199
REDDOXX MailDepot 2032 SP2 2.2.1242 has Insufficient Session Expiration because tokens are not invalidated upon a logout...
CVE-2019-19200
REDDOXX MailDepot 2032 2.2.1242 allows authenticated users to access the mailboxes of other users...
CVE-2020-26554
REDDOXX MailDepot 2033 aka 2.3.3022 allows XSS via an incoming HTML e-mail message...
CVE-2020-26554
REDDOXX MailDepot 2033 aka 2.3.3022 allows XSS via an incoming HTML e-mail message...
Design/Logic Flaw
REDDOXX MailDepot 2033 aka 2.3.3022 allows XSS via an incoming HTML e-mail message...
CVE-2020-26554
REDDOXX MailDepot 2033 aka 2.3.3022 allows XSS via an incoming HTML e-mail message...
CVE-2020-26554
REDDOXX MailDepot 2033 (2.3.3022) is affected by a persistent Cross-site Scripting (XSS) in incoming HTML e-mails (CWE-79). The SySS advisory SYSS-2020-037 indicates the vulnerability arises from processing HTML mail, allowing script execution in the context of the user’s browser when viewing mes...
reddoxx maildepot Cross-Site Scripting Vulnerability
reddoxx maildepot reddoxx maildepot is an e-mail archiving software from German reddoxx. The software stores all e-mails automatically and permanently in an archive independent of the mail server. A cross-site scripting vulnerability exists in MailDepot version 2033 2.3.3022, which stems from a...
MailDepot 2033 2.3.3022 Cross Site Scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Advisory ID: SYSS-2020-037 Product: MailDepot Manufacturer: REDDOXX GmbH Affected Versions: 2033 2.3.3022 Tested Versions: 2033 2.3.3022 Vulnerability Type: Persistent Cross-site Scripting CWE-79 Risk Level: High Solution Status: Open Manufacturer...
CVE-2019-19200
REDDOXX MailDepot 2032 2.2.1242 allows authenticated users to access the mailboxes of other users...
CVE-2019-19200
REDDOXX MailDepot 2032 2.2.1242 allows authenticated users to access the mailboxes of other users...
Design/Logic Flaw
REDDOXX MailDepot 2032 2.2.1242 allows authenticated users to access the mailboxes of other users...
CVE-2019-19200
REDDOXX MailDepot 2032 2.2.1242 allows authenticated users to access the mailboxes of other users...
CVE-2019-19200
REDDOXX MailDepot 2032 SP2 (version 2.2.1242) is affected by CVE-2019-19200 due to an improper authorization weakness. The vulnerability allows authenticated users to access other users’ mailboxes, effectively an authorization bypass. The issue was disclosed in an advisory (SYSS-2019-048) and pub...
CVE-2019-19199
REDDOXX MailDepot 2032 SP2 2.2.1242 has Insufficient Session Expiration because tokens are not invalidated upon a logout...
CVE-2019-19199
REDDOXX MailDepot 2032 SP2 2.2.1242 has Insufficient Session Expiration because tokens are not invalidated upon a logout...
Session fixation
REDDOXX MailDepot 2032 SP2 2.2.1242 has Insufficient Session Expiration because tokens are not invalidated upon a logout...