101 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-63499
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting XSS via the theme parameter. CVE-2025-63499 Note that Nessus relies on the presence of the package as...
CVE-2025-63498
alinto SOGo 5.12.3 is vulnerable to Cross Site Scripting XSS via the "userName" parameter...
EUVD-2022-51891
Malicious code in bioql PyPI...
EUVD-2022-51893
Malicious code in bioql PyPI...
DEBIAN-CVE-2025-53603
In Alinto SOPE SOGo 2.0.2 through 5.12.2, sope-core/NGExtensions/NGHashMap.m allows a NULL pointer dereference and SOGo crash via a request in which a parameter in the query string is a duplicate of a parameter in the POST body...
CVE-2024-24510
Cross Site Scripting vulnerability in Alinto SOGo before 5.10.0 allows a remote attacker to execute arbitrary code via the import function to the mail component...
CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
CVE-2023-48104
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
CVE-2022-4556
A vulnerability was found in Alinto SOGo up to 5.7.1 and classified as problematic. Affected by this issue is the function migrateMailIdentities of the file SoObjects/SOGo/SOGoUserDefaults.m of the component Identity Handler. The manipulation of the argument fullName leads to cross site scripting...
CVE-2022-4558
A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack...
Linux Distros Unpatched Vulnerability : CVE-2022-4558
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file...
PT-2025-49122
Name of the Vulnerable Software and Affected Versions Alinto Sogo version 5.12.3 Description Alinto Sogo 5.12.3 is susceptible to Cross Site Scripting XSS attacks. The issue is located in the handling of the theme parameter. Successful exploitation could allow an attacker to inject malicious...
CVE-2024-24510
Cross Site Scripting vulnerability in Alinto SOGo before 5.10.0 allows a remote attacker to execute arbitrary code via the import function to the mail component...
UBUNTU-CVE-2024-24510
Cross Site Scripting vulnerability in Alinto SOGo before 5.10.0 allows a remote attacker to execute arbitrary code via the import function to the mail component...
PT-2024-20429 · Alinto +1 · Alinto Sogo +1
Name of the Vulnerable Software and Affected Versions: Alinto SOGo versions prior to 5.10.0 Description: A Cross Site Scripting issue exists in Alinto SOGo, allowing a remote attacker to execute arbitrary code via the import function to the mail component. This can be exploited by a remote...
CVE-2024-24510
Cross Site Scripting vulnerability in Alinto SOGo before 5.10.0 allows a remote attacker to execute arbitrary code via the import function to the mail component...
CVE-2024-24510
Cross Site Scripting vulnerability in Alinto SOGo before 5.10.0 allows a remote attacker to execute arbitrary code via the import function to the mail component...
CVE-2024-24510
CVE-2024-24510 : A cross-site scripting vulnerability affects Alinto SOGo before 5.10.0. An attacker can remotely execute arbitrary code through the mail component’s import function. Affected software: Alinto SOGo up to version 5.9.x (prior to 5.10.0). Root cause: input in the import function is ...
