CVE-2002-2410

openwebmail.pl in Open WebMail 1.7 and 1.71 reveals sensitive information in error messages and generates different responses whether a user exists or not, which allows remote attackers to identify valid usernames via brute force attacks and obtain certain configuration and version information...

PT-2021-16567

Name of the Vulnerable Software and Affected Versions: Samsung Email versions prior to 6.1.41.0 Description: The issue is related to improper synchronization logic, which can cause message leaks in certain mailboxes in plain text when STARTTLS negotiation fails. Recommendations: For versions prio...

Rocket.Chat: Pinning leaks message content

The message content could be improperly pinned, allowing the content to be leaked to an unauthorized client. Validation was lacking in the pinMessage method, which allowed arbitrary messages to be pinned regardless of the user's access. This permitted messages from private channels to be exposed ...