CVE-2018-0682

Denbun CVE-2018-0682 stems from improper session management in Denbun POP (v3.3P R4.0 and earlier) and Denbun IMAP (v3.3I R4.0 and earlier). This weakness lets remote attackers read or send mail and modify configuration via unspecified vectors. The CVSS (3.0) vectors indicate high impact across c...

CVE-2018-0680

CVE-2018-0680 affects Denbun WebMail components (Denbun POP v3.3P R4.0 and earlier; Denbun IMAP v3.3I R4.0 and earlier). The root cause is hard-coded credentials, enabling remote attackers to read/write mail or alter configuration. Connected sources (NVD/PRION/JVN) confirm specific vulnerability ...

CVE-2018-0681

Denbun by NEOJAPAN Inc. is affected (Denbun POP v3.3P R4.0 and earlier; Denbun IMAP v3.3I R4.0 and earlier). The issue is hard-coded credentials that may allow remote attackers to login to the Management page and modify configuration. This CVE is also listed with high/critical impact in sources t...

CVE-2018-0687

CVE-2018-0687 is a cross-site scripting (CWE-79) vulnerability in Denbun’s HTML mail view, affecting Denbun POP/IMAP, version V3.3P R4.0 and earlier (and Denbun IMAP V3.3I R4.0 and earlier). The issue allows an attacker to cause a verified user’s browser to execute arbitrary script via unspecifie...

CVE-2018-0683

The CVE-2018-0683 entry describes a stack-based buffer overflow in Denbun (NEOJAPAN Inc.) related to processing Cookie data, affecting Denbun POP v3.3P R4.0 and earlier and Denbun IMAP v3.3I R4.0 and earlier. Exploitation could allow remote code execution or a denial-of-service condition. Connect...

CVE-2018-0684

CVE-2018-0684 is a Denbun vulnerability (Denbun POP/IMAP, affected versions V3.3P R3.0 and earlier; POP R3.0/IMAP R3.0 and earlier) where a stack-based buffer overflow in processing multipart/form-data enables remote code execution or DoS. Root cause: flaw in multipart/form-data handling. Affecte...

CVE-2018-0685

CVE-2018-0685 is a SQL injection vulnerability in Denbun POP (and IMAP in related records) prior to fixed versions. The issue allows a remote authenticated attacker to execute arbitrary SQL commands via HTTP requests for mail search, affecting Denbun POP versions V3.3P R4.0 and earlier. Underlyin...

CVE-2018-0686

CVE-2018-0686 affects Denbun by NEOJAPAN Inc. (Denbun POP 3.3P R4.0 and earlier; Denbun IMAP 3.3I R4.0 and earlier). The vulnerability allows remote authenticated attackers to upload and execute arbitrary executable files via unspecified vectors. MITRE/connected sources indicate mitigation includ...