PT-2019-15211 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: Dolibarr version 10.0.2 Description: The issue is related to a cross-site scripting XSS problem. It occurs via the "outgoing email setup" feature, specifically in the "admin/mails.php?action=edit" URI, through the "Sender email for automatic...

Cisco Email Security Appliance Filter Bypass Vulnerability

According to its self-reported version, Cisco Email Security Appliance ESA is affected by a filter bypass vulnerability in the Sender Policy Framework SPF functionality of Cisco AsyncOS Software for Cisco Email Security Appliance ESA due to insufficiently validating certain incoming SPF messages...

CVE-2019-12706

A vulnerability in the Sender Policy Framework SPF functionality of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass the configured user filters on an affected device. The vulnerability exists because the affected software...

CVE-2019-12706 Cisco Email Security Appliance Filter Bypass Vulnerability

A vulnerability in the Sender Policy Framework SPF functionality of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass the configured user filters on an affected device. The vulnerability exists because the affected software...

CVE-2019-12706 Cisco Email Security Appliance Filter Bypass Vulnerability

A vulnerability in the Sender Policy Framework SPF functionality of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass the configured user filters on an affected device. The vulnerability exists because the affected software...

The vulnerability of the Sender Policy Framework component in the Cisco Email Security Appliance’s security system allows attackers to bypass the configured content filters and compromise the integrity of the protected information.

The vulnerability of the Sender Policy Framework component in the Cisco Email Security Appliance exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass the configured content filters and compromise the integrity of the protected...

CVE-2017-18564

The sender plugin before 1.2.1 for WordPress has multiple XSS issues...

Cross site scripting

The sender plugin before 1.2.1 for WordPress has multiple XSS issues...

CVE-2017-18564

CVE-2017-18564 affects the WordPress plugin Sender (BestWebSoft) before 1.2.1. It describes multiple XSS flaws in the plugin, enabling authenticated users to inject JavaScript in victims’ browsers (CWE-79). The issue is network-accessible but requires user interaction; remediation is to update to...

CVE-2017-18564

The sender plugin before 1.2.1 for WordPress has multiple XSS issues...

Black Hat 2019: WhatsApp Users Still Open to Message Manipulation

LAS VEGAS – Researchers at Black Hat USA 2019 demoed how known vulnerabilities in WhatsApp could still be exploited in several attacks that manipulate chats. Facebook-owned WhatsApp is a popular end-to-end encrypted messaging platform with at least 1.5 billion users. Researchers with Check Point...

CVE-2019-1955

A vulnerability in the Sender Policy Framework SPF functionality of Cisco AsyncOS Software for Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. The vulnerability is due to incomplete input and validation checking...

Cisco Email Security Appliance AsyncOS Software Input Validation Error Vulnerability (CNVD-2020-16476)

Cisco Email Security Appliance ESA is an email security appliance from Cisco in the U.S. AsyncOS Software is the operating system that runs on it. An input validation error vulnerability exists in AsyncOS Software in the Cisco Email Security Appliance. The vulnerability stems from the lack of a...

PT-2019-3142 · Cisco · Cisco Email Security Appliance

Name of the Vulnerable Software and Affected Versions: Cisco Email Security Appliance ESA affected versions not specified Description: The issue is related to the Sender Policy Framework SPF component of the Cisco Email Security Appliance ESA, which has a vulnerability due to insufficient input...

CVE-2016-10793

cPanel before 59.9999.145 allows arbitrary code execution due to an incorrect ! in Mail::SPF scripts SEC-152...

CVE-2018-6349

When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affects WhatsApp for Android prior to 2.18.248 and WhatsApp Business for Android prior to 2.18.132...

The vulnerability of the anti-spam protection mechanism of the Cisco Email Security Appliance allows attackers to compromise the integrity of the protected information.

The vulnerability of the anti-spam protection mechanism of Cisco Email Security Appliance is related to errors in the verification of Sender Policy Framework SPF messages. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information by sending...

CVE-2018-14478

ecard.php in Coppermine Photo Gallery CPG 1.5.46 has XSS via the sendername, recipientemail, greetings, or recipientname parameter...

FreeBSD : comms/hylafax -- Malformed fax sender remote code execution in JPEG support (3df5a920-6edc-11e9-a44b-0050562a4d7b)

A malicious sender that sets both JPEG and MH,MR,MMR or JBIG in the same DCS signal or sends a large JPEG page could lead to remote code execution. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright...

Local Privilege Escalation

libdbus-glib-1.so is vulnerable to local privilege escalation attacks. The vulnerability exists due to the improper filtering of the message sender value when the NameOwnerChanged signal is received, allowing privilege escalation attacks...