8757 matches found
Information Exposure
Overview egroupware/egroupware is a library that extends a classic groupware with an integrated CRM-system, a secure file-server and Collabora Online Office. Affected versions of this package are vulnerable to Information Exposure via the calendar/freebusy.php process. An attacker can obtain a li...
Cross-site Scripting (XSS)
Overview egroupware/egroupware is a library that extends a classic groupware with an integrated CRM-system, a secure file-server and Collabora Online Office. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the user parameter in the calendar/freebusy.php process. A...
EGroupware 安全漏洞
EGroupware is an online office platform from EGroupware, Inc. A security vulnerability exists in EGroupware version 17.1.20190111, which stems from the presence of user enumeration in calendar/freebusy.php, which could allow an unauthenticated, remote attacker to enumerate web application users...
CVE-2023-38329
An issue was discovered in eGroupWare 17.1.20190111. A cross-site scripting Reflected XSS vulnerability exists in calendar/freebusy.php, which allows unauthenticated remote attackers to inject arbitrary web script or HTML into the "user" HTTP/GET parameter, which reflects its input without...
CVE-2023-38327
An issue was discovered in eGroupWare 17.1.20190111. A User Enumeration vulnerability exists under calendar/freebusy.php, which allows unauthenticated remote attackers to enumerate the users of web applications based on server response...
PT-2025-29232 · Unknown · Egroupware
Name of the Vulnerable Software and Affected Versions: eGroupWare version 17.1.20190111 Description: An issue exists in eGroupWare that allows for the injection of arbitrary web script or HTML. The vulnerability is a cross-site scripting XSS of the Reflected type and is located in the...
Huawei HarmonyOS and EMUI calendar storage module privilege bypass vulnerability
Huawei EMUI and Huawei HarmonyOS are both products of the Chinese company Huawei Huawei.Huawei EMUI is a mobile operating system based on Android development.Huawei HarmonyOS is an operating system. Provides a full-scenario distributed operating system based on a microkernel. A privilege bypass...
CVE-2023-38327
An issue was discovered in eGroupWare 17.1.20190111. A User Enumeration vulnerability exists under calendar/freebusy.php, which allows unauthenticated remote attackers to enumerate the users of web applications based on server response...
Huawei HarmonyOS and EMUI calendar storage module privilege bypass vulnerability (CNVD-2025-16594)
Huawei EMUI and Huawei HarmonyOS are both products of the Chinese company Huawei Huawei.Huawei EMUI is a mobile operating system based on Android development.Huawei HarmonyOS is an operating system. Provides a full-scenario distributed operating system based on a microkernel. A privilege bypass...
EGroupware 安全漏洞
EGroupware is an online office platform from EGroupware, Inc. A security vulnerability exists in EGroupware version 17.1.20190111, which stems from the presence of reflective cross-site scripting in calendar/freebusy.php, which could allow an unauthenticated, remote attacker to inject arbitrary w...
CVE-2025-6975
The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘calendarheader’ parameter in all versions up to, and including, 7.0.3 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2025-53177
Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule syncing function of watches...
CVE-2025-53178
Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units...
The vulnerability of the Calendar Storage module in the EMUI operating system of HarmonyOS allows a hacker to gain access to and modify data.
The vulnerability of the Calendar Storage module in the EMUI operating system of HarmonyOS is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to read and modify data...
The vulnerability of the Calendar Storage module in the EMUI operating system of HarmonyOS, related to deficiencies in access control, allows attackers to gain access to read and modify data.
The vulnerability of the Calendar Storage module in the EMUI operating system of HarmonyOS is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to read and modify data...
WordPress plugin Events Manager 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2025-6244
The Essential Addons for Elementor – Popular Elementor Templates and Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the via Calendar And Business Reviews Widgets attributes in all versions up to, and including, 6.1.19 due to insufficient input sanitization and outpu...
CVE-2025-53178
Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units...
