175 matches found
CVE-2025-71063
Errands before 46.2.10 does not verify TLS certificates for CalDAV servers...
CVE-2025-71063
The issue concerns Errands (pre-46.2.10) failing to verify TLS certificates when communicating with CalDAV servers, a trust-management vulnerability. Root cause: TLS certificate validation is omitted for CalDAV server connections, enabling exposure to misissued or invalid certificates. Impact det...
Linux Distros Unpatched Vulnerability : CVE-2025-71063
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Errands before 46.2.10 does not verify TLS certificates for CalDAV servers. CVE-2025-71063 Note that Nessus relies on the presence of the package as reported by...
Errands 信任管理问题漏洞
Errands is a to-do task management tool for mrvladus individual developers. A trust management issue vulnerability exists in Errands versions prior to 46.2.10 that stems from not validating the TLS certificate of the CalDAV server...
ownCloud < 10.15.3 Multiple Vulnerabilities
ownCloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; if description...
EUVD-2007-5923
Malware in sbrugna...
EUVD-2011-3217
Malware in sbrugna...
EUVD-2013-6923
Malware in sbrugna...
EUVD-2020-18836
Malware in sbrugna...
EUVD-2016-1830
Malware in sbrugna...
CVE-2025-59045
Stalwart is a mail and collaboration server. Starting in version 0.12.0 and prior to version 0.13.3, a memory exhaustion vulnerability exists in Stalwart's CalDAV implementation that allows authenticated attackers to cause denial-of-service by triggering unbounded memory consumption through...
CVE-2025-59045
Stalwart is a mail and collaboration server. Starting in version 0.12.0 and prior to version 0.13.3, a memory exhaustion vulnerability exists in Stalwart's CalDAV implementation that allows authenticated attackers to cause denial-of-service by triggering unbounded memory consumption through...
CVE-2025-59045 Stalwart vulnerable to Memory Exhaustion via CalDAV Event Expansion
Stalwart is a mail and collaboration server. Starting in version 0.12.0 and prior to version 0.13.3, a memory exhaustion vulnerability exists in Stalwart's CalDAV implementation that allows authenticated attackers to cause denial-of-service by triggering unbounded memory consumption through...
CVE-2025-59045
CVE-2025-59045 affects Stalwart mail/collaboration server in its CalDAV implementation. Vulnerable in versions 0.12.0 through 0.13.2 due to a memory exhaustion flaw in ArchivedCalendarEventData.expand when processing CalDAV REPORT requests with event expansion (e.g., expanded recurring events). A...
PT-2025-37076
Name of the Vulnerable Software and Affected Versions: Stalwart versions 0.12.0 through 0.13.2 Description: Stalwart is a mail and collaboration server. A memory exhaustion vulnerability exists in Stalwart’s CalDAV implementation that allows authenticated attackers to cause a denial-of-service by...
stalwart 安全漏洞
stalwart is a versatile mail and collaboration server open-sourced by Stalwart Labs. A security vulnerability exists in stalwart versions prior to 0.12.0 through 0.13.3, which stems from a memory exhaustion issue in the CalDAV implementation that could lead to a denial of service attack...
CVE-2011-3253
CalDAV in Apple iOS before 5 does not validate X.509 certificates for SSL sessions, which allows man-in-the-middle attackers to spoof calendar servers and obtain sensitive information via an arbitrary certificate...
CVE-2016-10836
cPanel before 55.9999.141 allows arbitrary file-read operations during authentication with caldav SEC-108...
ABB Cylon Aspect 3.08.01 File Upload MD5 Checksum Bypass Vulnerability
ABB Cylon Aspect version 3.08.01 has a vulnerability in caldavInstall.php, caldavInstallAgendav.php, and caldavUpload.php files, where the presence of an EXPERTMODE parameter activates a badassMode feature. This mode allows an unauthenticated attacker to bypass MD5 checksum validation during file...
Fedora: Security Advisory (FEDORA-2024-123f2b3666)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...