Lucene search
+L

5914 matches found

Cvelist
Cvelist
added 2025/01/13 1:11 p.m.36 views

CVE-2025-22800 WordPress Post SMTP plugin <= 2.9.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in Saad Iqbal Post SMTP post-smtp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post SMTP: from n/a through = 2.9.11...

4.3CVSS0.00385EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/13 1:11 p.m.12 views

CVE-2025-22800 WordPress Post SMTP plugin <= 2.9.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in Saad Iqbal Post SMTP post-smtp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post SMTP: from n/a through = 2.9.11...

4.3CVSS8.5AI score0.00385EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/13 1:11 p.m.8 views

CVE-2025-22800 WordPress Post SMTP plugin <= 2.9.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in Saad Iqbal Post SMTP post-smtp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post SMTP: from n/a through = 2.9.11...

4.3CVSS7.2AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/01/13 12:00 a.m.27 views

PT-2025-4709 · Post Smtp · Post Smtp

Name of the Vulnerable Software and Affected Versions: Post SMTP versions 2.9.11 and earlier Description: The issue is related to a Missing Authorization vulnerability in Post SMTP, which allows exploiting incorrectly configured access control security levels. Recommendations: For Post SMTP...

8.8CVSS9.1AI score0.00385EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/01/13 12:00 a.m.12 views

WordPress plugin Post SMTP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS8.2AI score0.00385EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/01/07 9:58 p.m.11 views

WordPress Post SMTP plugin <= 2.9.11 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Post SMTP versions = 2.9.11...

8.8CVSS7AI score0.00385EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2024/12/19 9:31 p.m.25 views

GHSA-RV83-H68Q-C4WQ GoPhish sends cleartext passwords

Insufficiently Protected Credentials in the Mail Server Configuration in GoPhish v0.12.1 allows an attacker to access cleartext passwords for the configured IMAP and SMTP servers...

7.5CVSS7.5AI score0.00365EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2024/12/19 9:31 p.m.24 views

GoPhish sends cleartext passwords

Insufficiently Protected Credentials in the Mail Server Configuration in GoPhish v0.12.1 allows an attacker to access cleartext passwords for the configured IMAP and SMTP servers...

7.5CVSS7.1AI score0.00365EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2024/12/19 7:15 p.m.51 views

CVE-2024-55196

Insufficiently Protected Credentials in the Mail Server Configuration in GoPhish v0.12.1 allows an attacker to access cleartext passwords for the configured IMAP and SMTP servers...

7.5CVSS0.00365EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/19 12:00 a.m.103 views

CVE-2024-55196

CVE-2024-55196 concerns GoPhish v0.12.1 with a misconfiguration in the mail-server credentials handling. The vulnerability arises from insufficiently protected credentials in the Mail Server Configuration, enabling an attacker to access cleartext passwords for the configured IMAP and SMTP servers...

7.5CVSS6.9AI score0.00365EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/19 12:00 a.m.12 views

CVE-2024-55196

Insufficiently Protected Credentials in the Mail Server Configuration in GoPhish v0.12.1 allows an attacker to access cleartext passwords for the configured IMAP and SMTP servers...

7.1AI score0.00365EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/16 4:15 p.m.27 views

CVE-2024-56003

Missing Authorization vulnerability in David Cramer Caldera SMTP Mailer caldera-smtp-mailer.This issue affects Caldera SMTP Mailer: from n/a through = 1.0.1...

4.3CVSS0.00353EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/16 3:54 p.m.32 views

CVE-2024-56003 WordPress Caldera SMTP Mailer plugin <= 1.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in David Cramer Caldera SMTP Mailer caldera-smtp-mailer.This issue affects Caldera SMTP Mailer: from n/a through = 1.0.1...

4.3CVSS0.00353EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/16 3:54 p.m.51 views

CVE-2024-56003

CVE-2024-56003 is a Missing Authorization vulnerability in Caldera SMTP Mailer. The Red Hat entry and the CVE description indicate impact on Caldera SMTP Mailer versions from unspecified earlier releases up to 1.0.1, with the issue originating from missing authorization. No exploitation details a...

4.3CVSS7.2AI score0.00353EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/16 3:54 p.m.10 views

CVE-2024-56003 WordPress Caldera SMTP Mailer plugin <= 1.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in David Cramer Caldera SMTP Mailer.This issue affects Caldera SMTP Mailer: from n/a through 1.0.1...

4.3CVSS7.2AI score0.00353EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/16 12:00 a.m.8 views

WordPress plugin Caldera SMTP Mailer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS8.6AI score0.00353EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/12/14 9:03 p.m.9 views

WordPress Caldera SMTP Mailer plugin <= 1.0.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Caldera SMTP Mailer versions = 1.0.1...

4.3CVSS7AI score0.00353EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2024/12/09 10:15 p.m.29 views

CVE-2024-12174

An Improper Certificate Validation vulnerability exists in Tenable Security Center where an authenticated, privileged attacker could intercept email messages sent from Security Center via a rogue SMTP server...

2.7CVSS0.00177EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/09 9:38 p.m.52 views

CVE-2024-12174

An Improper Certificate Validation vulnerability exists in Tenable Security Center where an authenticated, privileged attacker could intercept email messages sent from Security Center via a rogue SMTP server...

2.7CVSS0.00177EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/09 9:38 p.m.99 views

CVE-2024-12174

CVE-2024-12174 affects Tenable Security Center and is caused by improper certificate validation when Security Center sends emails via an SMTP server. The underlying issue allows an authenticated, privileged attacker to intercept email messages sent from Security Center using a rogue SMTP server. ...

2.7CVSS3.6AI score0.00177EPSS
SaveExploits0References1
Rows per page
Query Builder