Lucene search
+L

4365 matches found

CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:0 a.m.88 views

Roundcube Webmail File Disclosure Vulnerability

Roundcube Webmail contains a file disclosure vulnerability caused by insufficient input validation in conjunction with file-based attachment plugins, which are used by default...

7.8CVSS7.1AI score0.36919EPSS
SaveIn wildExploits5
Openbugbounty
Openbugbounty
added 2021/10/11 4:48 a.m.17 views

All Vulnerabilities for webmail.usfq.edu.ec Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| webmail.usfq.edu.ec ---|--- Open Bug...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2021/09/15 6:34 a.m.17 views

loginwebmail.com Cross Site Scripting vulnerability OBB-2141668

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Openbugbounty
Openbugbounty
added 2021/09/14 9:38 a.m.26 views

webmail.iranpotk.com Cross Site Scripting vulnerability OBB-2140052

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Openbugbounty
Openbugbounty
added 2021/09/14 9:25 a.m.31 views

webmail.8800.dk Cross Site Scripting vulnerability OBB-2140031

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Openbugbounty
Openbugbounty
added 2021/09/14 9:21 a.m.21 views

webmail.emmicorp.com Cross Site Scripting vulnerability OBB-2140026

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Openbugbounty
Openbugbounty
added 2021/09/14 8:56 a.m.12 views

webmail.ersag.com.tr Cross Site Scripting vulnerability OBB-2139994

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/09/10 12:0 a.m.9 views

The vulnerability of the Webmail component of the FortiMail email protection system allows a hacker to cause a service failure.

The vulnerability of the Webmail component of the FortiMail email protection system is related to a memory release error. Exploiting this vulnerability could allow an attacker to cause service interruptions by sending specially crafted login requests to the system...

5.3CVSS7.2AI score0.01328EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/08/06 12:0 a.m.9 views

The vulnerabilities of the Webmail components and the Administrative Interface of the FortiMail email protection system allow attackers to execute arbitrary commands or execute arbitrary code.

The vulnerability of the Webmail components and the Administrative Interface of the FortiMail email protection system arises due to an overflow in the buffer on the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands or code by sending specially crafted HTT...

9CVSS8.3AI score0.01095EPSS
SaveExploits0References4Affected Software1
SonarSource Blog
SonarSource Blog
added 2021/07/27 12:0 a.m.143 views

Zimbra 8.8.15 - Webmail Compromise via Email

Zimbra is a popular webmail solution for global enterprises. According to Zimbra, it is used by over 200,000 businesses and over a thousand government & financial institutions to exchange emails between millions of users every day. When attackers get access to an employees email account, it often...

7.5CVSS0.1AI score0.02995EPSS
SaveExploits2
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.21 views

The vulnerability in the Webmail of the FortiMail email protection system, which allows a hacker to gain unauthorized access to protected information.

The vulnerability of FortiMail’s webmail system relates to deficiencies in the checking of path names to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information through specially crafted web requests...

8.8CVSS6.5AI score0.01102EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/07/12 2:15 p.m.10 views

CVE-2021-24013

Multiple Path traversal vulnerabilities in the Webmail of FortiMail before 6.4.4 may allow a regular user to obtain unauthorized access to files and data via specifically crafted web requests...

6.5CVSS5.8AI score0.01102EPSS
SaveExploits0References1
NVD
NVD
added 2021/07/12 2:15 p.m.19 views

CVE-2021-24013

Multiple Path traversal vulnerabilities in the Webmail of FortiMail before 6.4.4 may allow a regular user to obtain unauthorized access to files and data via specifically crafted web requests...

8.8CVSS0.01102EPSS
SaveExploits0References1
Prion
Prion
added 2021/07/12 2:15 p.m.18 views

Path traversal

Multiple Path traversal vulnerabilities in the Webmail of FortiMail before 6.4.4 may allow a regular user to obtain unauthorized access to files and data via specifically crafted web requests...

4CVSS6.5AI score0.01102EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/07/12 2:15 p.m.5 views

CVE-2021-24013

Multiple Path traversal vulnerabilities in the Webmail of FortiMail before 6.4.4 may allow a regular user to obtain unauthorized access to files and data via specifically crafted web requests...

8.8CVSS6.8AI score0.01102EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2021/07/12 1:30 p.m.55 views

CVE-2021-24013

FortiMail Webmail before 6.4.4 is affected by multiple path traversal vulnerabilities that allow a regular user to access files and data via crafted web requests. The CVE-2021-24013 entry is supported by multiple sources, including NVD and Red Hat, and is linked to Fortinet advisory FG-IR-21-014....

8.8CVSS6.5AI score0.01102EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2021/07/12 1:15 p.m.6 views

CVE-2021-26090

A missing release of memory after its effective lifetime vulnerability in the Webmail of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6 may allow an unauthenticated remote attacker to exhaust available memory via specifically crafted login requests...

7.5CVSS7.2AI score0.01328EPSS
SaveExploits0References1
NVD
NVD
added 2021/07/12 1:15 p.m.21 views

CVE-2021-26090

A missing release of memory after its effective lifetime vulnerability in the Webmail of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6 may allow an unauthenticated remote attacker to exhaust available memory via specifically crafted login requests...

7.5CVSS0.01328EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/07/12 1:15 p.m.7 views

CVE-2021-26090

A missing release of memory after its effective lifetime vulnerability in the Webmail of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6 may allow an unauthenticated remote attacker to exhaust available memory via specifically crafted login requests...

7.5CVSS6.7AI score0.01328EPSS
SaveExploits0References2
Prion
Prion
added 2021/07/12 1:15 p.m.16 views

Design/Logic Flaw

A missing release of memory after its effective lifetime vulnerability in the Webmail of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6 may allow an unauthenticated remote attacker to exhaust available memory via specifically crafted login requests...

5CVSS7.6AI score0.01328EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder