5946 matches found
EulerOS 2.0 SP5 : ruby (EulerOS-SA-2019-1990)
According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A SMTP command injection flaw was found in the way Ruby's Net::SMTP module handled CRLF sequences in certain SMTP commands. An attacker could...
[SECURITY] Fedora 30 Update: curl-7.65.3-4.fc30
curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
WordPress postman-smtp plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. postman-smtp is an email plugin used in it. A cross-site scripting vulnerability exists in the WordPress postman-smtp plugin. An...
RLSA-2019:2799 Important: nginx:1.14 security update
Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 Post Office Protocol 3 and IMAP protocols, with a focus on high concurrency, performance and low memory usage. Security Fixes: HTTP/2: large amount of data request leads to denial of service CVE-2019-9511 HTTP/2: flood using...
Important: nginx:1.14 security update
Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 Post Office Protocol 3 and IMAP protocols, with a focus on high concurrency, performance and low memory usage. Security Fixes: HTTP/2: large amount of data request leads to denial of service CVE-2019-9511 HTTP/2: flood using...
Atlassian JIRA Server Template Injection Vulnerability (CVE-2019-11581)
Binary data jiracve201911581templateinjection.nbin...
CVE-2017-18603
The postman-smtp plugin through 2017-10-04 for WordPress has XSS via the wp-admin/tools.php?page=postmanemaillog page parameter...
CVE-2017-18603
The postman-smtp plugin through 2017-10-04 for WordPress has XSS via the wp-admin/tools.php?page=postmanemaillog page parameter...
Design/Logic Flaw
The postman-smtp plugin through 2017-10-04 for WordPress has XSS via the wp-admin/tools.php?page=postmanemaillog page parameter...
CVE-2017-18603
The CVE-2017-18603 issue is a confirmed XSS in the WordPress Postman SMTP plugin (up to 2017-10-04) affecting the wp-admin/tools.php?page=postman_email_log parameter. Connected sources (Red Hat, CNVD, NVD, CVE listings, and WPVulnDB) consistently describe an XSS vulnerability in this plugin. No r...
CVE-2017-18603
The postman-smtp plugin through 2017-10-04 for WordPress has XSS via the wp-admin/tools.php?page=postmanemaillog page parameter...
openSUSE Security Update : exim (openSUSE-2019-2093)
exim was updated to fix a security issue : - CVE-2019-15846: Fixed a buffer overflow in SMTP Delivery process where a remote attacker could execute code with root privileges by sending crafted SNI data boo1149182. C Tenable Network Security, Inc. The descriptive text and package checks in this...
Security update for exim (important)
openSUSE Security Update: Security update for exim Announcement ID: openSUSE-SU-2019:2093-1 Rating: important References: 1149182 Cross-References: CVE-2019-15846 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: exim wa...
smtp.elital.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-956592 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Fedora Update for nginx FEDORA-2019-7a0b45fdc4
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
curl:curl_fuzzer_smtp: Use-of-uninitialized-value in smtp_state_ehlo_resp
Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5634440956477440 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzersmtp Job Type: libfuzzermsancurl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
CVE-2019-14305
Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for Wi-Fi, mDNS, POP3, SMTP, and notification alerts, which allow an attacker to cause a denial of service or code execution via crafted requests to the web server. Affected firmware versions depend on the print...
CVE-2019-14305
CVE-2019-14305 affects Ricoh printers (notably SP C250/DN/C252 family and SP C250SF/C252SF models). The underlying issue is buffer overflows in the HTTP parameter handling for Wi‑Fi, mDNS, POP3, SMTP, and alert processing in the web server, allowing a remote attacker to cause denial of service or...
curl:curl_fuzzer_smtp: Negative-size-param in fuzz_tlv_to_string
Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=6288244651589632 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzersmtp Job Type: libfuzzerasani386curl Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...
Fedora Update for squirrelmail FEDORA-2019-1a87523729
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...