5941 matches found
CVE-2022-42699 WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Remote Code Execution (RCE)
Auth. Remote Code Execution vulnerability in Easy WP SMTP plugin = 1.5.1 on WordPress...
CVE-2022-42699 WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Remote Code Execution (RCE)
Auth. Remote Code Execution vulnerability in Easy WP SMTP plugin = 1.5.1 on WordPress...
CVE-2022-45829
CVE-2022-45829 affects the WordPress Easy WP SMTP plugin, specifically versions <= 1.5.1. The vulnerability is an authenticated path traversal in the plugin, allowing traversal to sensitive files. Several sources also note potential arbitrary file deletion as part of the impact for affected ve...
CVE-2022-45833
CVE-2022-45833 is an authenticated path traversal vulnerability in WordPress Easy WP SMTP plugin versions ≤ 1.5.1. The issue, documented across multiple sources, allows traversal of directories in affected installations; exact exploit details are not provided in the initial/dependent documents. R...
CVE-2022-45833 WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Directory Traversal
Auth. Path Traversal vulnerability in Easy WP SMTP plugin = 1.5.1 on WordPress...
PT-2022-27651 · WordPress · Easy Wp Smtp
Name of the Vulnerable Software and Affected Versions: Easy WP SMTP plugin versions 1.5.1 and earlier Description: The issue is related to an Authenticated Path Traversal vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or detail...
WordPress plugin Easy WP SMTP 代码注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code injection vulnerability exis...
WordPress plugin Easy WP SMTP 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...
PT-2022-27653 · WordPress · Easy Wp Smtp
Name of the Vulnerable Software and Affected Versions: Easy WP SMTP plugin versions 1.5.1 and earlier Description: The issue is related to an Authenticated Path Traversal vulnerability. This vulnerability affects the Easy WP SMTP plugin on WordPress. Recommendations: For Easy WP SMTP plugin...
WordPress plugin Easy WP SMTP 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...
Discourse < 2.8.14 Multiple Vulnerability
Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...
Easy WP SMTP < 1.5.2 - Admin+ Arbitrary File Deletion
The plugin does not validate some user input used to generate paths, which could allow high privilege users such as admin to delete arbitrary files even when they should not be able to, for example in multisite via a traversal attack...
Easy WP SMTP < 1.5.2 - Admin+ RCE
The plugin could allow high privilege users such as admin to perform RCE even when they should not be able to for example in multisite setups...
Easy WP SMTP < 1.5.2 - Admin+ Arbitrary File Access
The plugin does not validate some user input used to generate paths, which could allow high privilege users such as admin to access arbitrary files even when they should not be able to, for example in multisite via a traversal attack...
No rate limiting on the reset password page will lead to a DOS attack and inbox flooding for any user
Description I can use this attack to take advantage of the reset password confirmation mechanism and send a large number of emails to anyone simply because I know his email address, as well as perform a DoS attack by draining the resources of the SMTP service and the web server. Proof of Concept ...
Mozilla Thunderbird Security Advisories (MFSA2021-47, MFSA2021-49) - Windows
Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...
Simmeth System GmbH Supplier Manager LFI / SQL Injection / Bypass
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Critical Vulnerabilities product: Simmeth System GmbH Supplier manager Lieferantenmanager vulnerable version: 5.6 fixed version: 5.6 CVE number: CVE-2022-44012,...
[SECURITY] Fedora 37 Update: nginx-1.22.1-1.fc37
Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and IMAP protocols, with a strong focus on high concurrency, performance and low memory usage...
[SECURITY] Fedora 35 Update: curl-7.79.1-7.fc35
curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
zeek -- potential DoS vulnerabilities
Tim Wojtulewicz of Corelight reports: Fix an issue where a specially-crafted FTP packet can cause Zeek to spend large amounts of time attempting to search for valid commands in the data stream. Fix a possible overflow in the Zeek dictionary code that may lead to a memory leak. Fix an issue where ...