Lucene search
+L

838 matches found

Tenable Nessus
Tenable Nessus
•added 2009/09/24 12:00 a.m.•26 views

SuSE 11 Security Update : Evolution (SAT Patch Number 778)

camel's NTLM SASL authentication mechanism as used by evolution did not properly validate server's challenge packets. CVE-2009-0582 This update also includes the following non-security fixes : - Fixes a critical crasher in mailer component. - Fixes creation of recurrence monthly items in GroupWis...

5.8CVSS5.9AI score0.02269EPSS
SaveExploits1References8
exploitpack
exploitpack
•added 2009/06/05 12:00 a.m.•25 views

Kjtechforce mailman b1 - Delete Row code SQL Injection

Kjtechforce mailman b1 - Delete Row code SQL Injection || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

0.2AI score
SaveExploits0
OSV
OSV
•added 2009/05/14 5:30 p.m.•29 views

DEBIAN-CVE-2009-1631

The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files...

2.1CVSS6.1AI score0.0044EPSS
SaveExploits1References1
Prion
Prion
•added 2009/05/14 5:30 p.m.•26 views

Design/Logic Flaw

The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files...

2.1CVSS6.2AI score0.0044EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2009/05/14 5:30 p.m.•24 views

CVE-2009-1631

The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files...

2.1CVSS5.8AI score0.0044EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2009/05/14 5:30 p.m.•30 views

CVE-2009-1631

The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files...

2.1CVSS5.9AI score0.0044EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2009/05/14 5:00 p.m.•37 views

CVE-2009-1631

The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files...

5.7AI score0.0044EPSS
SaveExploits1References5
Mend
Mend
•added 2009/05/14 5:00 p.m.•3 views

CVE-2009-1631

The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files...

5.1CVSS0.0044EPSS
SaveExploits1References6
Debian CVE
Debian CVE
•added 2009/05/14 5:00 p.m.•35 views

CVE-2009-1631

The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files...

2.1CVSS5.7AI score0.0044EPSS
SaveExploits1
CVE
CVE
•added 2009/05/14 5:00 p.m.•80 views

CVE-2009-1631

Evolution 2.26.1 and earlier contains a local information‑disclosure issue in the Mailer component: .evolution directory (and related subpaths) has world‑readable permissions, enabling local users to read sensitive mail-related files. Root cause is file/directory permissions, not a remote/vector-...

2.1CVSS5.9AI score0.0044EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/05/14 12:00 a.m.•4 views

CVE-2009-1631: Undefined Security Weakness

The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files...

2.1CVSS5.9AI score0.0044EPSS
SaveExploits1References2
Prion
Prion
•added 2009/05/08 6:30 p.m.•25 views

Crlf injection

CRLF injection vulnerability in CGI RESCUE Web Mailer before 1.04 allows remote attackers to inject arbitrary HTTP headers, and conduct cross-site scripting XSS or HTTP response splitting attacks, via CRLF sequences in an unspecified web form...

4.3CVSS6.3AI score0.01065EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2009/05/08 6:30 p.m.•28 views

CVE-2009-1591

CRLF injection vulnerability in CGI RESCUE Web Mailer before 1.04 allows remote attackers to inject arbitrary HTTP headers, and conduct cross-site scripting XSS or HTTP response splitting attacks, via CRLF sequences in an unspecified web form...

4.3CVSS6.2AI score0.01065EPSS
SaveExploits0References5
CVE
CVE
•added 2009/05/08 6:00 p.m.•59 views

CVE-2009-1591

CVE-2009-1591 affects CGI RESCUE Web Mailer prior to 1.04, where CRLF sequences in an unspecified web form enable HTTP header injection, enabling cross-site scripting (XSS) or HTTP response splitting. Public documentation consistently identifies Web Mailer v1.03 and earlier as affected. The under...

4.3CVSS6.3AI score0.01065EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2009/05/08 6:00 p.m.•46 views

CVE-2009-1591

CRLF injection vulnerability in CGI RESCUE Web Mailer before 1.04 allows remote attackers to inject arbitrary HTTP headers, and conduct cross-site scripting XSS or HTTP response splitting attacks, via CRLF sequences in an unspecified web form...

6.2AI score0.01065EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/05/08 12:00 a.m.•3 views

CVE-2009-1591: Improper Neutralization of Input During Web Page Generation

CRLF injection vulnerability in CGI RESCUE Web Mailer before 1.04 allows remote attackers to inject arbitrary HTTP headers, and conduct cross-site scripting XSS or HTTP response splitting attacks, via CRLF sequences in an unspecified web form...

4.3CVSS5.8AI score0.01065EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2009/04/28 7:36 a.m.•22 views

Web Mailer from CGI RESCUE vulnerable to HTTP header injection

Overview Web Mailer from CGI RESCUE contains a HTTP header injection vulnerability. Web Mailer from CGI RESCUE is a software that sends emails with contents that are input into a HTML form. Web Mailer contains a HTTP header injection vulnerability. This vulnerability has been fixed and an updated...

4.3CVSS7AI score0.01065EPSS
SaveExploits0References8
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2009/04/27 12:00 a.m.•53 views

JVN#28020230 Web Mailer from CGI RESCUE vulnerable to HTTP header injection

Web Mailer from CGI RESCUE is a software that sends emails with contents that are input into a HTML form. Web Mailer contains a HTTP header injection vulnerability. Impact Falsified information may be displayed or an arbitrary script may be executed on the user's web browser. HTTP response...

4.3CVSS6.5AI score0.01065EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2009/02/27 12:00 a.m.•26 views

Fedora Update for evolution FEDORA-2007-404

Check for the Version of evolution OpenVAS Vulnerability Test Fedora Update for evolution FEDORA-2007-404 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

6.8CVSS6.4AI score0.03364EPSS
SaveExploits0References2
seebug.org
seebug.org
•added 2009/02/21 12:00 a.m.•21 views

i-dreams Mailer 1.2 Final (admin.dat) File Disclosure Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: i-dreams Mailer Version : 1.2 Final Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir --------------------------------------------------------- Xpl:...

7.1AI score
SaveExploits0
Rows per page
Query Builder