[SECURITY] Fedora 29 Update: cyrus-imapd-3.0.10-1.fc29

The Cyrus IMAP Internet Message Access Protocol server provides access to personal mail, system-wide bulletin boards, news-feeds, calendar and contac ts through the IMAP, JMAP, NNTP, CalDAV and CardDAV protocols. The Cyrus IMAP server is a scalable enterprise groupware system designed for use fro...

Fedora Update for cyrus-imapd FEDORA-2019-309f559057

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Synology CardDAV Server Cross-Site Scripting Vulnerability

Synology CardDAV Server is a Synology application for synchronizing address books, and Address Book Editor is one of the address book editors. A cross-site scripting vulnerability exists in Address Book Editor in Synology CardDAV Server versions prior to 6.0.8-0086. The vulnerability can be...

CVE-2018-8928

Cross-site scripting XSS vulnerability in Address Book Editor in Synology CardDAV Server before 6.0.8-0086 allows remote authenticated users to inject arbitrary web script or HTML via the 1 familyname, 2 givenname, or 3 additionalname parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in Address Book Editor in Synology CardDAV Server before 6.0.8-0086 allows remote authenticated users to inject arbitrary web script or HTML via the 1 familyname, 2 givenname, or 3 additionalname parameter...

CVE-2018-8928

Cross-site scripting XSS vulnerability in Address Book Editor in Synology CardDAV Server before 6.0.8-0086 allows remote authenticated users to inject arbitrary web script or HTML via the 1 familyname, 2 givenname, or 3 additionalname parameter...

CVE-2018-8928

Cross-site scripting XSS vulnerability in Address Book Editor in Synology CardDAV Server before 6.0.8-0086 allows remote authenticated users to inject arbitrary web script or HTML via the 1 familyname, 2 givenname, or 3 additionalname parameter...

CVE-2018-8928

Cross-site scripting XSS vulnerability in Address Book Editor in Synology CardDAV Server before 6.0.8-0086 allows remote authenticated users to inject arbitrary web script or HTML via the 1 familyname, 2 givenname, or 3 additionalname parameter...

CVE-2018-8928

Synology CardDAV Server’s Address Book Editor is affected by a cross-site scripting (XSS) vulnerability prior to version 6.0.8-0086. The issue allows remote authenticated users to inject arbitrary web script or HTML via the family_name, given_name, or additional_name parameters. Corroborating sou...

CVE-2018-8928: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Address Book Editor in Synology CardDAV Server before 6.0.8-0086 allows remote authenticated users to inject arbitrary web script or HTML via the 1 familyname, 2 givenname, or 3 additionalname parameter...

PT-2018-18726

Name of the Vulnerable Software and Affected Versions Synology CardDAV Server versions prior to 6.0.8-0086 Description A cross-site scripting XSS issue exists in the Address Book Editor of Synology CardDAV Server, allowing remote authenticated users to inject arbitrary web script or HTML via the...

Synology CardDAV Server Information Disclosure Vulnerability

Synology CardDAV Server is a contact management application that allows you to easily synchronize and access your address book. An information disclosure vulnerability exists in Synology CardDAV Server, which can be exploited by remote attackers to obtain user credentials via brute force attack...

Authentication flaw

An improper restriction of excessive authentication attempts vulnerability in /principals in Synology CardDAV Server before 6.0.7-0085 allows remote attackers to obtain user credentials via a brute-force attack...

CVE-2017-15887

An improper restriction of excessive authentication attempts vulnerability in /principals in Synology CardDAV Server before 6.0.7-0085 allows remote attackers to obtain user credentials via a brute-force attack...

CVE-2017-15887

An improper restriction of excessive authentication attempts vulnerability in /principals in Synology CardDAV Server before 6.0.7-0085 allows remote attackers to obtain user credentials via a brute-force attack...

CVE-2017-15887

CVE-2017-15887 describes an improper restriction of excessive authentication attempts in the Synology CardDAV Server, affecting versions before 6.0.7-0085. The vulnerability is triggered via brute-forcing on the /principals endpoint, enabling remote attackers to obtain user credentials. According...

PT-2017-14265

Name of the Vulnerable Software and Affected Versions Synology CardDAV Server versions prior to 6.0.7-0085 Description The issue is related to an improper restriction of excessive authentication attempts, allowing remote attackers to obtain user credentials via a brute-force attack on the...

CVE-2017-15887: Improper Restriction of Excessive Authentication Attempts

An improper restriction of excessive authentication attempts vulnerability in /principals in Synology CardDAV Server before 6.0.7-0085 allows remote attackers to obtain user credentials via a brute-force attack...

[SECURITY] Fedora 27 Update: cyrus-imapd-3.0.4-1.fc27

The Cyrus IMAP Internet Message Access Protocol server provides access to personal mail, system-wide bulletin boards, news-feeds, calendar and contac ts through the IMAP, JMAP, NNTP, CalDAV and CardDAV protocols. The Cyrus IMAP server is a scalable enterprise groupware system designed for use fro...

[SECURITY] Fedora 26 Update: cyrus-imapd-3.0.3-1.fc26

The Cyrus IMAP Internet Message Access Protocol server provides access to personal mail, system-wide bulletin boards, news-feeds, calendar and contac ts through the IMAP, JMAP, NNTP, CalDAV and CardDAV protocols. The Cyrus IMAP server is a scalable enterprise groupware system designed for use fro...