Easy WP SMTP Plugin for WordPress < 1.4.4 Sensitive Information Disclosure

The WordPressEasy WP SMTP Plugin installed on the remote host is affected by a Sensitive Information Disclosure. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

CVE-2022-38658

BigFix deployments that have installed the Notification Service on Windows are susceptible to disclosing SMTP BigFix operator's sensitive data in clear text. Operators who use Notification Service related content from BES Support are at risk of leaving their SMTP sensitive data exposed...

Code injection

BigFix deployments that have installed the Notification Service on Windows are susceptible to disclosing SMTP BigFix operator's sensitive data in clear text. Operators who use Notification Service related content from BES Support are at risk of leaving their SMTP sensitive data exposed...

CVE-2022-38658 HCL BigFix Server Automation (SA) is affected by a security vulnerability around Notification Service

BigFix deployments that have installed the Notification Service on Windows are susceptible to disclosing SMTP BigFix operator's sensitive data in clear text. Operators who use Notification Service related content from BES Support are at risk of leaving their SMTP sensitive data exposed...

CVE-2022-38658

CVE-2022-38658 affects HCL BigFix Server Automation deployments that have the Notification Service installed on Windows. The root issue is exposure of SMTP BigFix operators’ sensitive data in cleartext via the Notification Service content from BES Support. Impact is limited to confidentiality, wi...

PT-2022-6377 · Nextcloud · Nextcloud Mail

Name of the Vulnerable Software and Affected Versions: Nextcloud mail versions prior to 1.15.0 Nextcloud mail versions prior to 2.2.2 Description: The issue is related to insufficient validation of incoming requests in the Nextcloud mail client, allowing a remote attacker to scan internal service...

CVE-2022-4312

A cleartext storage of sensitive information vulnerability exists in PcVue versions 8.10 through 15.2.3. This could allow an unauthorized user with access the email and short messaging service SMS accounts configuration files to discover the associated simple mail transfer protocol SMTP account...

Code injection

A cleartext storage of sensitive information vulnerability exists in PcVue versions 8.10 through 15.2.3. This could allow an unauthorized user with access the email and short messaging service SMS accounts configuration files to discover the associated simple mail transfer protocol SMTP account...

CVE-2022-4312

A cleartext storage of sensitive information vulnerability exists in PcVue versions 8.10 through 15.2.3. This could allow an unauthorized user with access the email and short messaging service SMS accounts configuration files to discover the associated simple mail transfer protocol SMTP account...

CVE-2022-4312

CVE-2022-4312 affects PcVue versions 8.10 through 15.2.3, where a cleartext storage vulnerability allows an unauthorized user with access to the email and SMS account configuration files to discover SMTP credentials and the SIM PIN code. This could enable access to the underlying email account an...

CVE-2022-4312

A cleartext storage of sensitive information vulnerability exists in PcVue versions 8.10 through 15.2.3. This could allow an unauthorized user with access the email and short messaging service SMS accounts configuration files to discover the associated simple mail transfer protocol SMTP account...

WordPress Easy WP SMTP Plugin < 1.5.2 Multiple Vulnerabilities

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

CVE-2022-42699

Auth. Remote Code Execution vulnerability in Easy WP SMTP plugin = 1.5.1 on WordPress...

Remote code execution

Auth. Remote Code Execution vulnerability in Easy WP SMTP plugin = 1.5.1 on WordPress...

CVE-2022-45829

Auth. Path Traversal vulnerability in Easy WP SMTP plugin = 1.5.1 at WordPress...

CVE-2022-45829

Auth. Path Traversal vulnerability in Easy WP SMTP plugin = 1.5.1 at WordPress...

CVE-2022-45833

Auth. Path Traversal vulnerability in Easy WP SMTP plugin = 1.5.1 on WordPress...

Path traversal

Auth. Path Traversal vulnerability in Easy WP SMTP plugin = 1.5.1 on WordPress...

Path traversal

Auth. Path Traversal vulnerability in Easy WP SMTP plugin = 1.5.1 at WordPress...

CVE-2022-42699

CVE-2022-42699 affects the WordPress Easy WP SMTP plugin (versions 1.5.1 and earlier). The vulnerability is authenticated remote code execution in the plugin’s auth component. CVE details indicate a network-exposed vector with low attack complexity, requiring low privileges and no user interactio...