PT-2019-13518

Name of the Vulnerable Software and Affected Versions Das U-Boot versions prior to 2019.07 Description An issue was discovered in Das U-Boot. There is an unbounded memcpy with a failed length check at nfs read reply when calling store block in the NFSv2 case. Recommendations For versions prior to...

PT-2019-13525

Name of the Vulnerable Software and Affected Versions Das U-Boot versions prior to 2019.07 Description A stack-based buffer overflow issue was found in the nfs handler reply helper function, specifically in the nfs lookup reply function. Recommendations For Das U-Boot versions prior to 2019.07,...

PT-2019-13521

Name of the Vulnerable Software and Affected Versions Das U-Boot versions prior to 2019.07 Description An issue was discovered in Das U-Boot where there is a read of out-of-bounds data at nfs read reply. Recommendations For versions prior to 2019.07, update to version 2019.07 or later to resolve...

PT-2019-13528

Name of the Vulnerable Software and Affected Versions Das U-Boot versions prior to 2019.07 Description A stack-based buffer overflow issue was found in the nfs handler reply helper function, specifically in the nfs umountall reply function. Recommendations For Das U-Boot versions prior to 2019.07...

PT-2019-13526

Name of the Vulnerable Software and Affected Versions Das U-Boot versions prior to 2019.07 Description An issue was discovered in the nfs handler reply helper function, specifically a stack-based buffer overflow in the nfs readlink reply function. Recommendations For Das U-Boot versions prior to...

CVE-2019-13950

index.php?c=admin&a=index in SyGuestBook A5 Version 1.2 has stored XSS via a reply to a comment...

Cross site scripting

index.php?c=admin&a=index in SyGuestBook A5 Version 1.2 has stored XSS via a reply to a comment...

CVE-2019-13950

index.php?c=admin&a=index in SyGuestBook A5 Version 1.2 has stored XSS via a reply to a comment...

CVE-2019-13950: Improper Neutralization of Input During Web Page Generation

index.php?c=admin&a=index in SyGuestBook A5 Version 1.2 has stored XSS via a reply to a comment...

PT-2019-11442

Name of the Vulnerable Software and Affected Versions: phpscriptsmall.com School College Portal with ERP Script versions 2.6.1 and earlier Description: The issue allows attackers to target administrators, teachers, and students. It involves a Cross Site Scripting XSS attack, which can be executed...

CVE-2019-1010028: Improper Neutralization of Input During Web Page Generation

phpscriptsmall.com School College Portal with ERP Script 2.6.1 and earlier is affected by: Cross Site Scripting XSS. The impact is: Attack administrators and teachers, students and more. The component is: /pro-school/index.php?student/message/sendreply/. The attack vector is:...

Debian DLA-1825-1 : kdepim security update

A reply-based decryption oracle was found in kdepim, which provides the KMail e-mail client. An attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted parts can further be hidden using HTML/CSS or ASCII newline character...

Mail.ru: Stored xss on message reply

XSS on message reply via double click functionality in web.icq.com...

Design/Logic Flaw

K-9 Mail v5.600 can include the original quoted HTML code of a specially crafted, benign looking, email within digitally signed reply messages. The quoted part can contain conditional statements that show completely different text if opened in a different email client. This can be abused by an...

UBUNTU-CVE-2019-10732

In KDE KMail 5.2.3, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted parts can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the...

UBUNTU-CVE-2019-10735

In Claws Mail 3.14.1, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted parts can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the...

DEBIAN-CVE-2019-10735

In Claws Mail 3.14.1, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted parts can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the...

UBUNTU-CVE-2019-10740

In Roundcube Webmail before 1.3.10, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted parts can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the...

UBUNTU-CVE-2019-10734

In KDE Trojita 0.7, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted parts can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the...

CVE-2019-10741

K-9 Mail v5.600 can include the original quoted HTML code of a specially crafted, benign looking, email within digitally signed reply messages. The quoted part can contain conditional statements that show completely different text if opened in a different email client. This can be abused by an...