EUVD-2019-2240

Malware in sbrugna...

EUVD-2020-4148

Malware in sbrugna...

CVE-2020-11806

In MailStore Outlook Add-in and Email Archive Outlook Add-in through 12.1.2, the login process does not validate the validity of the certificate presented by the server...

CVE-2020-11806

In MailStore Outlook Add-in and Email Archive Outlook Add-in through 12.1.2, the login process does not validate the validity of the certificate presented by the server...

Code injection

In MailStore Outlook Add-in and Email Archive Outlook Add-in through 12.1.2, the login process does not validate the validity of the certificate presented by the server...

CVE-2020-11806

In MailStore Outlook Add-in and Email Archive Outlook Add-in through 12.1.2, the login process does not validate the validity of the certificate presented by the server...

CVE-2020-11806

The CVE-2020-11806 entry concerns MailStore Outlook Add-in and Email Archive Outlook Add-in up to version 12.1.2, where the login process does not validate the server’s SSL/TLS certificate. This represents a root-cause weakness in certificate validation during authentication, potentially allowing...

CVE-2020-11806: Improper Certificate Validation

In MailStore Outlook Add-in and Email Archive Outlook Add-in through 12.1.2, the login process does not validate the validity of the certificate presented by the server...

MailStore Server and Service Provider Edition Authorization Issues Vulnerability

MailStore Server is a set of email storage solutions from MailStore Germany. The product is mainly used for email archiving, email management and email storage functions.MailStore Server Service Provider Edition is the service edition of MailStore Server. An authorization issue vulnerability exis...

CVE-2019-10229

An issue was discovered in MailStore Server and Service Provider Edition 9.x through 11.x before 11.2.2. When the directory service for synchronizing and authenticating users is set to Generic LDAP, an attacker is able to login as an existing user with an arbitrary password on the second login...

CVE-2019-10229

An issue was discovered in MailStore Server and Service Provider Edition 9.x through 11.x before 11.2.2. When the directory service for synchronizing and authenticating users is set to Generic LDAP, an attacker is able to login as an existing user with an arbitrary password on the second login...

Code injection

An issue was discovered in MailStore Server and Service Provider Edition 9.x through 11.x before 11.2.2. When the directory service for synchronizing and authenticating users is set to Generic LDAP, an attacker is able to login as an existing user with an arbitrary password on the second login...

CVE-2019-10229

An issue was discovered in MailStore Server and Service Provider Edition 9.x through 11.x before 11.2.2. When the directory service for synchronizing and authenticating users is set to Generic LDAP, an attacker is able to login as an existing user with an arbitrary password on the second login...

CVE-2019-10229

MailStore Server and MailStore Server Service Provider Edition are affected (versions 9.x–11.x before 11.2.2). The root cause is an authentication issue when the directory service is set to Generic LDAP, allowing an attacker to log in as an existing user with an arbitrary password on the second l...

CVE-2019-10229: Insufficient Session Expiration

An issue was discovered in MailStore Server and Service Provider Edition 9.x through 11.x before 11.2.2. When the directory service for synchronizing and authenticating users is set to Generic LDAP, an attacker is able to login as an existing user with an arbitrary password on the second login...

MailStore Server search-result Reflected Cross-Site Scripting

A reflected cross-site scripting vulnerability has been reported in MailStore Server. The vulnerability is due to insufficient input validation on user input for search results. A remote user can exploit this vulnerability by enticing an authenticated user to click on a malicious link...

MailStore 10.0.1 Cross Site Scripting / Open Redirect

secuvera-SA-2017-02: Reflected XSS and Open Redirect in MailStore Server Affected Products MailStore Server Version 10.0.1.12148 was tested according to the vendor: - MailStore 9.2 to 10.0.1 is affected by the Reflected XSS Vulnerability - Mailstore 9.0 to 10.0.1 is affected by the Open Redirect...

Buffer overflow

Buffer overflow in emmailstore.dll 6.5.0.3 in the QuikSoft EasyMail MailStore ActiveX control allows remote attackers to execute arbitrary code via a long first argument to the CreateStore method...

CVE-2008-6447

Buffer overflow in emmailstore.dll 6.5.0.3 in the QuikSoft EasyMail MailStore ActiveX control allows remote attackers to execute arbitrary code via a long first argument to the CreateStore method...

CVE-2008-6447

CVE-2008-6447 : The QuikSoft EasyMail MailStore ActiveX control (emmailstore.dll, version 6.5.0.3) is vulnerable to a buffer overflow when processing a long first argument to the CreateStore method, allowing remote code execution. This vulnerability is documented across multiple connected sources...