Lucene search
+L

5949 matches found

Cvelist
Cvelist
added 2024/07/20 3:20 a.m.34 views

CVE-2024-6694 WP Mail SMTP <= 4.0.1 - Authenticated (Admin+) SMTP Password Exposure

The WP Mail SMTP plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 4.0.1. This is due to plugin providing the SMTP password in the SMTP Password field when viewing the settings. This makes it possible for authenticated attackers, with...

2.7CVSS0.00574EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/07/20 3:20 a.m.28 views

CVE-2024-6694 WP Mail SMTP <= 4.0.1 - Authenticated (Admin+) SMTP Password Exposure

The WP Mail SMTP plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 4.0.1. This is due to plugin providing the SMTP password in the SMTP Password field when viewing the settings. This makes it possible for authenticated attackers, with...

2.7CVSS3.4AI score0.00574EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/07/20 12:00 a.m.35 views

PT-2024-37803 · WordPress · Wp Mail Smtp

Name of the Vulnerable Software and Affected Versions: WP Mail SMTP plugin for WordPress versions up to, and including, 4.0.1 Description: The issue allows authenticated attackers with administrative-level access and above to view the SMTP password for the supplied server when viewing the setting...

2.7CVSS6.5AI score0.00574EPSS
SaveExploits0References5
Mageia
Mageia
added 2024/07/16 3:21 a.m.46 views

Updated sendmail packages fix security vulnerability

sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because sendmail supports . but some other...

5.3CVSS7.3AI score0.01082EPSS
SaveExploits2References3
OpenVAS
OpenVAS
added 2024/07/16 12:00 a.m.14 views

Mageia: Security Advisory (MGASA-2024-0270)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS7.1AI score0.01082EPSS
SaveExploits2References5
OSV
OSV
added 2024/07/15 7:15 a.m.11 views

CVE-2024-6744

The SMTP Listener of Secure Email Gateway from Cellopoint does not properly validate user input, leading to a Buffer Overflow vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the remote server...

9.8CVSS6.2AI score0.00771EPSS
SaveExploits0References2
NVD
NVD
added 2024/07/15 7:15 a.m.33 views

CVE-2024-6744

The SMTP Listener of Secure Email Gateway from Cellopoint does not properly validate user input, leading to a Buffer Overflow vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the remote server...

9.8CVSS0.00771EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/07/15 6:32 a.m.34 views

CVE-2024-6744

The SMTP Listener of Secure Email Gateway from Cellopoint does not properly validate user input, leading to a Buffer Overflow vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the remote server...

9.8CVSS0.00771EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/07/15 6:32 a.m.19 views

CVE-2024-6744

The SMTP Listener of Secure Email Gateway from Cellopoint does not properly validate user input, leading to a Buffer Overflow vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the remote server...

9.8CVSS8.2AI score0.00771EPSS
SaveExploits0References2
Citrix
Citrix
added 2024/07/13 12:00 a.m.34 views

How to Configure XenServer to Send System Alerts through Authenticated SMTP Servers

This article describes how to configure XenServer to send system alerts through SMTP servers that require authentication. Requirements Administrative access to a XenServer host console either directly, through SSH, or by using theConsoletab in XenCenter. Background Customers can configure XenServ...

7.2AI score
SaveExploits0
OpenVAS
OpenVAS
added 2024/07/09 12:00 a.m.21 views

Ubuntu: Security Advisory (USN-6881-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.1AI score0.01996EPSS
SaveExploits0References2
OSV
OSV
added 2024/07/08 9:37 a.m.12 views

USN-6881-1 exim4 vulnerability

It was discovered that Exim did not enforce STARTTLS sync point on client side. An attacker could possibly use this issue to perform response injection during MTA SMTP sending...

7.5CVSS7.3AI score0.01996EPSS
SaveExploits0References2
Ubuntu
Ubuntu
added 2024/07/08 9:37 a.m.30 views

USN-6881-1: Exim vulnerability

It was discovered that Exim did not enforce STARTTLS sync point on client side. An attacker could possibly use this issue to perform response injection during MTA SMTP sending...

7.5CVSS7.5AI score0.01996EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/07/08 12:00 a.m.29 views

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS : Exim vulnerability (USN-6881-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6881-1 advisory. It was discovered that Exim did not enforce STARTTLS sync point on client side. An attacker could possibly use this issue to...

7.5CVSS7.7AI score0.01996EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2024/06/26 1:32 p.m.7 views

Astra Linux – Vulnerability in exim4

Exim dnsdb Out-of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SMTP...

3.1CVSS6.6AI score0.01606EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:29 p.m.4 views

Malicious code in Fluentmail.Smtp (NuGet)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
Debian
Debian
added 2024/06/15 8:32 a.m.16 views

[SECURITY] [DLA 3829-1] sendmail security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3829-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès June 15, 2024 https://wiki.debian.org/LTS -...

5.3CVSS5.2AI score0.01082EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2024/06/15 12:00 a.m.19 views

Debian dla-3829 : libmilter-dev - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3829 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3829-2 [email protected] https://www.debian.org/lts/security/...

5.3CVSS5.7AI score0.01082EPSS
SaveExploits2References4
WPVulnDB
WPVulnDB
added 2024/06/14 12:00 a.m.26 views

Easy WP SMTP by SendLayer < 2.3.1 - Exposure of Sensitive Information via the UI

Description The Easy WP SMTP by SendLayer – WordPress SMTP and Email Log Plugin plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 2.3.0. This is due to plugin providing the SMTP password in the SMTP Password field when viewing the settings. This make...

2.7CVSS6.2AI score0.00333EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/06/13 9:15 a.m.8 views

CVE-2024-3073

The Easy WP SMTP by SendLayer – WordPress SMTP and Email Log Plugin plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 2.3.0. This is due to plugin providing the SMTP password in the SMTP Password field when viewing the settings. This makes it possibl...

2.7CVSS5.7AI score0.00333EPSS
SaveExploits0References2
Rows per page
Query Builder