76 matches found
CVE-2018-8928
Synology CardDAV Server’s Address Book Editor is affected by a cross-site scripting (XSS) vulnerability prior to version 6.0.8-0086. The issue allows remote authenticated users to inject arbitrary web script or HTML via the family_name, given_name, or additional_name parameters. Corroborating sou...
Synology CardDAV Server Information Disclosure Vulnerability
Synology CardDAV Server is a contact management application that allows you to easily synchronize and access your address book. An information disclosure vulnerability exists in Synology CardDAV Server, which can be exploited by remote attackers to obtain user credentials via brute force attack...
CVE-2017-15887
An improper restriction of excessive authentication attempts vulnerability in /principals in Synology CardDAV Server before 6.0.7-0085 allows remote attackers to obtain user credentials via a brute-force attack...
Authentication flaw
An improper restriction of excessive authentication attempts vulnerability in /principals in Synology CardDAV Server before 6.0.7-0085 allows remote attackers to obtain user credentials via a brute-force attack...
CVE-2017-15887
An improper restriction of excessive authentication attempts vulnerability in /principals in Synology CardDAV Server before 6.0.7-0085 allows remote attackers to obtain user credentials via a brute-force attack...
CVE-2017-15887
CVE-2017-15887 describes an improper restriction of excessive authentication attempts in the Synology CardDAV Server, affecting versions before 6.0.7-0085. The vulnerability is triggered via brute-forcing on the /principals endpoint, enabling remote attackers to obtain user credentials. According...
[SECURITY] Fedora 27 Update: cyrus-imapd-3.0.4-1.fc27
The Cyrus IMAP Internet Message Access Protocol server provides access to personal mail, system-wide bulletin boards, news-feeds, calendar and contac ts through the IMAP, JMAP, NNTP, CalDAV and CardDAV protocols. The Cyrus IMAP server is a scalable enterprise groupware system designed for use fro...
[SECURITY] Fedora 26 Update: cyrus-imapd-3.0.3-1.fc26
The Cyrus IMAP Internet Message Access Protocol server provides access to personal mail, system-wide bulletin boards, news-feeds, calendar and contac ts through the IMAP, JMAP, NNTP, CalDAV and CardDAV protocols. The Cyrus IMAP server is a scalable enterprise groupware system designed for use fro...
[SECURITY] Fedora 25 Update: radicale-1.1.2-1.fc25
The Radicale Project is a CalDAV calendar and CardDAV contact server. It aims to be a light solution, easy to use, easy to install, easy to configur e. As a consequence, it requires few software dependencies and is pre-configur ed to work out-of-the-box. The Radicale Project runs on most of the...
[SECURITY] Fedora 24 Update: radicale-1.1.2-1.fc24
The Radicale Project is a CalDAV calendar and CardDAV contact server. It aims to be a light solution, easy to use, easy to install, easy to configur e. As a consequence, it requires few software dependencies and is pre-configur ed to work out-of-the-box. The Radicale Project runs on most of the...
[SECURITY] Fedora 26 Update: radicale-1.1.2-1.fc26
The Radicale Project is a CalDAV calendar and CardDAV contact server. It aims to be a light solution, easy to use, easy to install, easy to configur e. As a consequence, it requires few software dependencies and is pre-configur ed to work out-of-the-box. The Radicale Project runs on most of the...
Kozea Radicale Authentication Error Vulnerability
Kozea Radicale, a project of the French company Kozea, is a free and open source CalDAV Calendar Synchronization Open Protocol and CardDAV Address Book Synchronization Open Protocol server solution. An authentication error vulnerability exists in Kozea Radicale versions prior to 1.1.2 and 2.x...
Nextcloud Multiple Vulnerabilities - Linux
Nextcloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nextcloud:nextcloudserver"; if...
CVE-2016-9465
Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Stored XSS in CardDAV image export. The CardDAV image export functionality as implemented in Nextcloud/ownCloud allows the download of images stored within a vCard. Due to not performing any kind of verification o...
CVE-2016-9465
Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Stored XSS in CardDAV image export. The CardDAV image export functionality as implemented in Nextcloud/ownCloud allows the download of images stored within a vCard. Due to not performing any kind of verification o...
CVE-2016-9465
Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Stored XSS in CardDAV image export. The CardDAV image export functionality as implemented in Nextcloud/ownCloud allows the download of images stored within a vCard. Due to not performing any kind of verification o...
Cross site scripting
Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Stored XSS in CardDAV image export. The CardDAV image export functionality as implemented in Nextcloud/ownCloud allows the download of images stored within a vCard. Due to not performing any kind of verification o...
CVE-2016-9465
Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Stored XSS in CardDAV image export. The CardDAV image export functionality as implemented in Nextcloud/ownCloud allows the download of images stored within a vCard. Due to not performing any kind of verification o...
CVE-2016-9465
CVE-2016-9465 affects Nextcloud Server < 10.0.1 and ownCloud Server
Stored XSS in CardDAV image export - ownCloud
The CardDAV image export functionality as implemented in ownCloud allows the download of images stored within a vCard. Due to not performing any kind of verification on the image content this is prone to a stored Cross-Site Scripting attack. Note:ownCloud employs a very strict Content Security...