Lucene search
+L

175 matches found

Cvelist
Cvelist
added 2026/01/12 3:56 p.m.28 views

CVE-2025-71063

Errands before 46.2.10 does not verify TLS certificates for CalDAV servers...

8.2CVSS0.00154EPSS
SaveExploits0References5
CVE
CVE
added 2026/01/12 3:56 p.m.51 views

CVE-2025-71063

The issue concerns Errands (pre-46.2.10) failing to verify TLS certificates when communicating with CalDAV servers, a trust-management vulnerability. Root cause: TLS certificate validation is omitted for CalDAV server connections, enabling exposure to misissued or invalid certificates. Impact det...

8.2CVSS6.5AI score0.00154EPSS
SaveExploits0References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/01/12 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-71063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Errands before 46.2.10 does not verify TLS certificates for CalDAV servers. CVE-2025-71063 Note that Nessus relies on the presence of the package as reported by...

8.2CVSS5.5AI score0.00154EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/12 12:00 a.m.10 views

Errands 信任管理问题漏洞

Errands is a to-do task management tool for mrvladus individual developers. A trust management issue vulnerability exists in Errands versions prior to 46.2.10 that stems from not validating the TLS certificate of the CalDAV server...

8.2CVSS6.4AI score0.00154EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2025/12/09 12:00 a.m.11 views

ownCloud < 10.15.3 Multiple Vulnerabilities

ownCloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; if description...

9.1CVSS7.8AI score0.00615EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2007-5923

Malware in sbrugna...

5CVSS6.4AI score0.01043EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2011-3217

Malware in sbrugna...

2.6CVSS6.2AI score0.00566EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2013-6923

Malware in sbrugna...

4CVSS6.4AI score0.01779EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2020-18836

Malware in sbrugna...

7.7CVSS6.5AI score0.01174EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2016-1830

Malware in sbrugna...

6.5CVSS6.6AI score0.01121EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/09/12 4:32 p.m.22 views

CVE-2025-59045

Stalwart is a mail and collaboration server. Starting in version 0.12.0 and prior to version 0.13.3, a memory exhaustion vulnerability exists in Stalwart's CalDAV implementation that allows authenticated attackers to cause denial-of-service by triggering unbounded memory consumption through...

7.1CVSS6.6AI score0.00341EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/10 4:15 p.m.50 views

CVE-2025-59045

Stalwart is a mail and collaboration server. Starting in version 0.12.0 and prior to version 0.13.3, a memory exhaustion vulnerability exists in Stalwart's CalDAV implementation that allows authenticated attackers to cause denial-of-service by triggering unbounded memory consumption through...

7.1CVSS0.00341EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/09/10 4:09 p.m.51 views

CVE-2025-59045 Stalwart vulnerable to Memory Exhaustion via CalDAV Event Expansion

Stalwart is a mail and collaboration server. Starting in version 0.12.0 and prior to version 0.13.3, a memory exhaustion vulnerability exists in Stalwart's CalDAV implementation that allows authenticated attackers to cause denial-of-service by triggering unbounded memory consumption through...

7.1CVSS0.00341EPSS
SaveExploits0References5
CVE
CVE
added 2025/09/10 4:09 p.m.280 views

CVE-2025-59045

CVE-2025-59045 affects Stalwart mail/collaboration server in its CalDAV implementation. Vulnerable in versions 0.12.0 through 0.13.2 due to a memory exhaustion flaw in ArchivedCalendarEventData.expand when processing CalDAV REPORT requests with event expansion (e.g., expanded recurring events). A...

7.1CVSS6AI score0.00341EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/09/10 12:00 a.m.15 views

PT-2025-37076

Name of the Vulnerable Software and Affected Versions: Stalwart versions 0.12.0 through 0.13.2 Description: Stalwart is a mail and collaboration server. A memory exhaustion vulnerability exists in Stalwart’s CalDAV implementation that allows authenticated attackers to cause a denial-of-service by...

7.1CVSS6.3AI score0.00341EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2025/09/10 12:00 a.m.12 views

stalwart 安全漏洞

stalwart is a versatile mail and collaboration server open-sourced by Stalwart Labs. A security vulnerability exists in stalwart versions prior to 0.12.0 through 0.13.3, which stems from a memory exhaustion issue in the CalDAV implementation that could lead to a denial of service attack...

7.1CVSS6.5AI score0.00341EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/05/22 3:54 a.m.15 views

CVE-2011-3253

CalDAV in Apple iOS before 5 does not validate X.509 certificates for SSL sessions, which allows man-in-the-middle attackers to spoof calendar servers and obtain sensitive information via an arbitrary certificate...

2.6CVSS5.6AI score0.00566EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:24 a.m.10 views

CVE-2016-10836

cPanel before 55.9999.141 allows arbitrary file-read operations during authentication with caldav SEC-108...

6.5CVSS7.3AI score0.01121EPSS
SaveExploits0References1
zdt
zdt
added 2024/11/06 12:00 a.m.351 views

ABB Cylon Aspect 3.08.01 File Upload MD5 Checksum Bypass Vulnerability

ABB Cylon Aspect version 3.08.01 has a vulnerability in caldavInstall.php, caldavInstallAgendav.php, and caldavUpload.php files, where the presence of an EXPERTMODE parameter activates a badassMode feature. This mode allows an unauthenticated attacker to bypass MD5 checksum validation during file...

7.5AI score
SaveExploits0
OpenVAS
OpenVAS
added 2024/06/15 12:00 a.m.17 views

Fedora: Security Advisory (FEDORA-2024-123f2b3666)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.5AI score0.00836EPSS
SaveExploits0References4
Rows per page
Query Builder