EUVD-2014-8228

Malware in sbrugna...

EUVD-2016-1581

Malware in sbrugna...

Sendio Local File Inclusion Vulnerability

Sendio is affected by a Local File Inclusion vulnerability that allows an unauthenticated, remote attacker to read potentially sensitive system files via a specially crafted URL. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Sendio Local File Inclusion Vulnerability

Sendio Email Security Platform is a suite of enterprise-class anti-spam and anti-virus solutions from Sendio, Inc. A local file inclusion vulnerability exists in Sendio versions prior to 8.2.1. A remote attacker can exploit the vulnerability to read sensitive system files with the help of a...

CVE-2016-10399

Sendio versions before 8.2.1 were affected by a Local File Inclusion vulnerability that allowed an unauthenticated, remote attacker to read potentially sensitive system files via a specially crafted URL...

CVE-2016-10399

Sendio versions before 8.2.1 were affected by a Local File Inclusion vulnerability that allowed an unauthenticated, remote attacker to read potentially sensitive system files via a specially crafted URL...

Arbitrary file deletion

Sendio versions before 8.2.1 were affected by a Local File Inclusion vulnerability that allowed an unauthenticated, remote attacker to read potentially sensitive system files via a specially crafted URL...

CVE-2016-10399

Sendio (Email Security Platform) is affected by a Local File Inclusion in versions before 8.2.1. An unauthenticated, remote attacker can read sensitive system files via a specially crafted URL. Public references indicate CVE-2016-10399 with CVSSv3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (base score...

CVE-2016-10399

Sendio versions before 8.2.1 were affected by a Local File Inclusion vulnerability that allowed an unauthenticated, remote attacker to read potentially sensitive system files via a specially crafted URL...

Sendio ESP Multiple Information Disclosure Vulnerabilities

Sendio is prone to multiple information disclosure vulnerabilities SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sendio:sendio"...

Sendio Detection

The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

[CORE-2015-0010] - Sendio ESP Information Disclosure Vulnerability

Advisory Information Title: Sendio ESP Information Disclosure Vulnerability Advisory ID: CORE-2015-0010 Advisory URL: http://www.coresecurity.com/advisories/sendio-esp-information-disclosure-vulnerability Date published: 2015-05-22 Date of last update: 2015-05-22 Vendors contacted: Sendio...

Sendio ESP information disclosure

Session disclosure via Referer...

Sendio ESP Information Disclosure Vulnerability

Sendio ESP Email Security Platform is a network appliance that provides anti-spam and anti-virus solutions for organizations from Sendio, USA. A security vulnerability exists in the web interface of Sendio ESP versions prior to 7.2.4. Due to the program failing to handle sessions correctly. A...

Sendio ESP 'jsessionid' Information Disclosure Vulnerability

Sendio ESP Email Security Platform is a network appliance that provides anti-spam and anti-virus solutions for organizations from Sendio, USA. A security vulnerability exists in Sendio ESP versions prior to 7.2.4. Due to the presence of session identifiers in emails. A remote attacker can exploit...

CVE-2014-8391

The Web interface in Sendio before 7.2.4 does not properly handle sessions, which allows remote authenticated users to obtain sensitive information from other users' sessions via a large number of requests...

Code injection

The Web interface in Sendio before 7.2.4 does not properly handle sessions, which allows remote authenticated users to obtain sensitive information from other users' sessions via a large number of requests...

Design/Logic Flaw

Sendio before 7.2.4 includes the session identifier in URLs in emails, which allows remote attackers to obtain sensitive information and hijack sessions by reading the jsessionid parameter in the Referrer HTTP header...

CVE-2014-8391

The Web interface in Sendio before 7.2.4 does not properly handle sessions, which allows remote authenticated users to obtain sensitive information from other users' sessions via a large number of requests...

CVE-2014-0999

Sendio before 7.2.4 includes the session identifier in URLs in emails, which allows remote attackers to obtain sensitive information and hijack sessions by reading the jsessionid parameter in the Referrer HTTP header...