Lucene search
+L

1540 matches found

Cvelist
Cvelist
•added 2015/03/25 2:00 p.m.•39 views

CVE-2015-2702

Cross-site scripting XSS vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via the sender address in an email...

5.7AI score0.0209EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2015/03/25 12:00 a.m.•7 views

PT-2015-5843

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-EMAIL versions prior to 8.0.0 Websense TRITON V-Series appliances version 7.7 Description A cross-site scripting XSS issue exists in the Message Log of the Email Security Gateway, allowing remote attackers to inject arbitrar...

4.3CVSS0.0209EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/03/25 12:00 a.m.•12 views

CVE-2015-2702: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via the sender address in an email...

4.3CVSS6AI score0.0209EPSS
SaveExploits1References2
CNVD
CNVD
•added 2015/01/08 12:00 a.m.•18 views

Kofax e-Transactions Sender Sendbox File Injection Vulnerability

Kofax e-Transactions Sender Sendbox is an add-on application to a suite of Kofax conversion modules from Kofax USA that automates the electronic transfer of documents to business processes via secure e-mail. A file injection vulnerability exists in Kofax e-Transactions Sender Sendbox, which allow...

6.4CVSS7.5AI score0.01229EPSS
SaveExploits1References1
Prion
Prion
•added 2015/01/01 11:59 a.m.•18 views

Code injection

The SaveMessage method in the LEADeMail.LEADSmtp.20 ActiveX control in LTCML14n.dll 14.0.0.34 in Kofax e-Transactions Sender Sendbox 2.5.0.933 allows remote attackers to write to arbitrary files via a pathname in the first argument...

6.4CVSS7.3AI score0.01229EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2015/01/01 11:00 a.m.•38 views

CVE-2011-5294

The SaveMessage method in the LEADeMail.LEADSmtp.20 ActiveX control in LTCML14n.dll 14.0.0.34 in Kofax e-Transactions Sender Sendbox 2.5.0.933 allows remote attackers to write to arbitrary files via a pathname in the first argument...

6.8AI score0.01229EPSS
SaveExploits1References1
CVE
CVE
•added 2015/01/01 11:00 a.m.•53 views

CVE-2011-5294

The CVE-2011-5294 issue affects Kofax e-Transactions Sender Sendbox 2.5.0.933, specifically the LEADeMail.LEADSmtp.20 ActiveX control (LTCML14n.dll 14.0.0.34). The SaveMessage method allows remote attackers to write to arbitrary files via a pathname supplied as the first argument. Multiple connec...

6.4CVSS7AI score0.01229EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2015/01/01 12:00 a.m.•4 views

PT-2015-3490

Name of the Vulnerable Software and Affected Versions Kofax e-Transactions Sender Sendbox version 2.5.0.933 Description The issue allows remote attackers to write to arbitrary files via a pathname in the first argument of the SaveMessage method in the LEADeMail.LEADSmtp.20 ActiveX control...

6.4CVSS0.01229EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/01/01 12:00 a.m.•6 views

CVE-2011-5294: Undefined Security Weakness

The SaveMessage method in the LEADeMail.LEADSmtp.20 ActiveX control in LTCML14n.dll 14.0.0.34 in Kofax e-Transactions Sender Sendbox 2.5.0.933 allows remote attackers to write to arbitrary files via a pathname in the first argument...

6.4CVSS6AI score0.01229EPSS
SaveExploits1References2
myhack58
myhack58
•added 2014/11/23 12:00 a.m.•27 views

webwinmail to brute force crack the falsification of any of the mailbox the sender-vulnerability warning-the black bar safety net

First of all, we landed an account test02,as shown: ! 7. png We test01 set up inside a proxy of the sender, here we set another account name called test02 ! 8. png ! 9. png We go to test01 view: ! 1 0. png We violence to crack this CAPTCHA: ! 1 1. png ! 1 2. png Hack is finished, we look at: ! 1 ...

1.1AI score
SaveExploits0
NVD
NVD
•added 2014/10/19 1:55 a.m.•26 views

CVE-2014-7098

The Fylet Secure Large File Sender aka com.application.fyletFileSender application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00266EPSS
SaveExploits0References3
Prion
Prion
•added 2014/10/19 1:55 a.m.•18 views

Information disclosure

The Fylet Secure Large File Sender aka com.application.fyletFileSender application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2014/10/19 1:00 a.m.•34 views

CVE-2014-7098

The Fylet Secure Large File Sender aka com.application.fyletFileSender application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.8AI score0.00266EPSS
SaveExploits0References3
CVE
CVE
•added 2014/10/19 1:00 a.m.•47 views

CVE-2014-7098

Affected product : Fylet Secure Large File Sender (aka com.application.fyletFileSender) app version 2.0 for Android. Root cause : the client does not verify X.509 certificates from SSL servers. Impact : enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a cr...

5.4CVSS6AI score0.00266EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2014/10/19 12:00 a.m.•3 views

PT-2014-7766

Name of the Vulnerable Software and Affected Versions Fylet Secure Large File Sender version 2.0 Description The issue concerns the application's failure to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a...

5.4CVSS0.00266EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/19 12:00 a.m.•8 views

CVE-2014-7098: Undefined Security Weakness

The Fylet Secure Large File Sender aka com.application.fyletFileSender application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00266EPSS
SaveExploits0References2
Fedora
Fedora
•added 2014/10/16 1:59 a.m.•44 views

[SECURITY] Fedora 21 Update: rsyslog-7.4.10-5.fc21

Rsyslog is an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine grain output format control. It is compatible with stock sysklogd and can be used as a drop-in replacement. Rsyslog is simple to set up,...

7.5CVSS1.5AI score0.07546EPSS
SaveExploits1
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•42 views

Exim Sender 3.35 Verification Remote Stack Buffer Overrun Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10290/info Exim has been reported prone to a remotely exploitable stack-based buffer overrun vulnerability. This is exposed if sender verification has been enabled in the agent and may be triggered by a malicious e-mail...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•15 views

FForm Sender 1.0 Processform.PHP3 Name Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14324/info A cross-site scripting vulnerability affects Form Sender. This issue is due to a failure of the application to properly sanitize user-supplied URI input that will be output in dynamically generated Web pages...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•20 views

Form Sender 1.0 Processform.PHP3 Failed Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14326/info A cross-site scripting vulnerability affects Form Sender. This issue is due to a failure of the application to properly sanitize user-supplied URI input that will be output in dynamically generated Web pages...

7.1AI score
SaveExploits0
Rows per page
Query Builder