701 matches found
CVE-2017-1000395
Jenkins 2.73.1 and earlier, 2.83 and earlier provides information about Jenkins user accounts which is generally available to anyone with Overall/Read permissions via the /user/username/api remote API. This included e.g. Jenkins users' email addresses if the Mailer Plugin is installed. The remote...
Redmine Information Disclosure Vulnerability (CNVD-2017-36111)
Redmine is a set of open source Web-based project management and defect tracking tools . The tool provides project management , issue tracking and role-based access control and other features . A security vulnerability exists in the 'reminders' function in the app/models/mailer.rb file in Redmine...
CVE-2017-16804
CVE-2017-16804 affects Redmine before 3.2.7 and 3.3.x before 3.3.4. The vulnerability lies in the reminders function (app/models/mailer.rb) which does not verify issue visibility, allowing remote authenticated users to disclose sensitive information by reading e-mail reminder messages. Affected v...
CVE-2017-16804
In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages...
actionmailer email address processing causes Denial of service
Multiple format string vulnerabilities in logsubscriber.rb files in the log subscriber component in Action Mailer in Ruby on Rails 3.x before 3.2.15 allow remote attackers to cause a denial of service via a crafted e-mail address that is improperly handled during construction of a log message...
mailer.100hertz.com XSS vulnerability
Vulnerable URL: http://mailer.100hertz.com/admin/index.php?page=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...
eservices.digitalmailer.com XSS vulnerability
Vulnerable URL: https://eservices.digitalmailer.com/statements/c/355/estatementform.asp?account==1"...
VulnCheck KEV: CVE-2003-0681
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets 1 recipient 2, final, or 3 mailer-specific envelope recipients, has unknown consequences...
Nuevomailer 6.0 - SQL Injection
Nuevomailer 6.0 - SQL Injection Exploit Title: Nuevo mailer version = 6.0 SQL Injection Exploit Author: ALEH BOITSAU Google Dork: inurl:/inc/rdr.php? Date: 2017-06-09 Vendor Homepage: https://www.nuevomailer.com/ Version: 6.0 and below Tested on: Linux Vulnerable script: rdr.php Vulnerable...
szi-intern.de XSS vulnerability
Open Bug Bounty ID: OBB-242724 Description| Value ---|--- Affected Website:| szi-intern.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Jenkins Mailer plugin security bypass vulnerability
CloudBees Jenkins is the United States CloudBees company's set of Java-based development of continuous integration tools . A security bypass vulnerability exists in the CloudBees Jenkins Mailer plugin, which allows remote attackers to submit a special request to bypass security restrictions and...
[SECURITY] [DSA 3769-1] libphp-swiftmailer security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3769-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 22, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3769-1] libphp-swiftmailer security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3769-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 22, 2017 https://www.debian.org/security/faq -...
TYPO3 CMS 2.0.3 Cross Site Scripting Vulnerability
TYPO3 CMS versions 2.0.3 and below suffer from a cross site scripting vulnerability. title: Cross Site Scripting XSS product: Recommend Page extension for TYPO3 CMS pbrecommendpage vulnerable version: =2.0.3 fixed version: - CVE number: - impact: Medium homepage: https://typo3.org/ found:...
Swift Mailer PwnScriptum Command Injection
Added: 01/17/2017 BID: 95140 Background Swift Mailer is a component-based library used for sending email from PHP. It is used by many PHP programming frameworks, e.g., Yii2, Laraval, and Symfony. Problem Swift Mailer library mail transport SwiftTransportMailTransport is vulnerable to command...
Swift Mailer PwnScriptum Command Injection
Added: 01/17/2017 BID: 95140 Background Swift Mailer is a component-based library used for sending email from PHP. It is used by many PHP programming frameworks, e.g., Yii2, Laraval, and Symfony. Problem Swift Mailer library mail transport SwiftTransportMailTransport is vulnerable to command...
Swift Mailer PwnScriptum Command Injection
Added: 01/17/2017 BID: 95140 Background Swift Mailer is a component-based library used for sending email from PHP. It is used by many PHP programming frameworks, e.g., Yii2, Laraval, and Symfony. Problem Swift Mailer library mail transport SwiftTransportMailTransport is vulnerable to command...
[SECURITY] Fedora 25 Update: php-swiftmailer-5.4.5-1.fc25
Swift Mailer integrates into any web app written in PHP, offering a flexible and elegant object-oriented approach to sending emails with a multitude of features. Autoloader: /usr/share/php/Swift/swiftrequired.php...
