Lucene search
+L

1949 matches found

NVD
NVD
•added 2025/12/02 2:16 p.m.•28 views

CVE-2025-41066

Horde Groupware v5.2.22 has a user enumeration vulnerability that allows an unauthenticated attacker to determine the existence of valid accounts on the system. To exploit the vulnerability, an HTTP request must be sent to ‘/imp/attachment.php’ including the parameters ‘id’ and ‘u’. If the...

6.9CVSS0.00245EPSS
SaveExploits0References1
OSV
OSV
•added 2025/12/02 2:16 p.m.•41 views

UBUNTU-CVE-2025-41066

Horde Groupware v5.2.22 has a user enumeration vulnerability that allows an unauthenticated attacker to determine the existence of valid accounts on the system. To exploit the vulnerability, an HTTP request must be sent to ‘/imp/attachment.php’ including the parameters ‘id’ and ‘u’. If the...

6.9CVSS5.8AI score0.00245EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/12/02 2:01 p.m.•38 views

CVE-2025-41066 Disclosure of sensitive information in Horde Groupware

Horde Groupware v5.2.22 has a user enumeration vulnerability that allows an unauthenticated attacker to determine the existence of valid accounts on the system. To exploit the vulnerability, an HTTP request must be sent to ‘/imp/attachment.php’ including the parameters ‘id’ and ‘u’. If the...

6.9CVSS0.00245EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/02 2:01 p.m.•36 views

CVE-2025-41066

The vulnerability concerns Horde Groupware v5.2.22. Affected component: Horde Groupware web interface. Root cause: unauthenticated user enumeration via HTTP request to /imp/attachment.php with parameters id and u, causing the server to reveal whether a user exists (returns an empty file when the ...

6.9CVSS5.8AI score0.00245EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/02 2:01 p.m.•12 views

CVE-2025-41066 Disclosure of sensitive information in Horde Groupware

Horde Groupware v5.2.22 has a user enumeration vulnerability that allows an unauthenticated attacker to determine the existence of valid accounts on the system. To exploit the vulnerability, an HTTP request must be sent to ‘/imp/attachment.php’ including the parameters ‘id’ and ‘u’. If the...

6.9CVSS5.8AI score0.00245EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2025/12/02 2:01 p.m.•18 views

CVE-2025-41066

Horde Groupware v5.2.22 has a user enumeration vulnerability that allows an unauthenticated attacker to determine the existence of valid accounts on the system. To exploit the vulnerability, an HTTP request must be sent to ‘/imp/attachment.php’ including the parameters ‘id’ and ‘u’. If the...

6.9CVSS5.8AI score0.00245EPSS
SaveExploits0
OSV
OSV
•added 2025/12/02 2:01 p.m.•17 views

CVE-2025-41066 Disclosure of sensitive information in Horde Groupware

Horde Groupware v5.2.22 has a user enumeration vulnerability that allows an unauthenticated attacker to determine the existence of valid accounts on the system. To exploit the vulnerability, an HTTP request must be sent to ‘/imp/attachment.php’ including the parameters ‘id’ and ‘u’. If the...

6.9CVSS6AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/02 12:00 a.m.•3 views

CVE-2025-41066: Exposure of Sensitive Information to an Unauthorized Actor

Horde Groupware v5.2.22 has a user enumeration vulnerability that allows an unauthenticated attacker to determine the existence of valid accounts on the system. To exploit the vulnerability, an HTTP request must be sent to ‘/imp/attachment.php’ including the parameters ‘id’ and ‘u’. If the...

6.9CVSS5.8AI score0.00245EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/02 12:00 a.m.•20 views

Horde Groupware 信息泄露漏洞

Horde Groupware is a collaboration software suite from Horde Open Source. An information disclosure vulnerability exists in Horde Groupware version v5.2.22, which originates from an unauthenticated attacker being able to determine whether a valid account exists by sending an HTTP request...

6.9CVSS6AI score0.00245EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2025/10/15 12:00 a.m.•8 views

Debian: Security Advisory (DLA-4333-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.8AI score0.49797EPSS
SaveExploits4References2
Debian
Debian
•added 2025/10/14 4:52 p.m.•24 views

[SECURITY] [DLA 4333-1] php-horde-css-parser security update

Debian LTS Advisory DLA-4333-1 [email protected] https://www.debian.org/lts/security/ Andreas Henriksson October 14, 2025 https://wiki.debian.org/LTS Package : php-horde-css-parser Version : 1.0.11-8+deb11u1 CVE ID : CVE-2020-13756 Debian Bug : Sabberworm PHP CSS Parser before 8.3.1 cal...

9.8CVSS7.7AI score0.49797EPSS
SaveExploits4
OSV
OSV
•added 2025/10/14 12:00 a.m.•7 views

DLA-4333-1 php-horde-css-parser - security update

Bulletin has no description...

9.8CVSS7AI score0.49797EPSS
SaveExploits4
Tenable Nessus
Tenable Nessus
•added 2025/10/14 12:00 a.m.•16 views

Debian dla-4333 : php-horde-css-parser - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4333 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4333-1 [email protected] https://www.debian.org/lts/security/...

9.8CVSS8.9AI score0.49797EPSS
SaveExploits4References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2008-7177

Malware in sbrugna...

10CVSS6.2AI score0.02202EPSS
SaveExploits0References21
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2005-1322

Malware in sbrugna...

4.3CVSS6.4AI score0.01228EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2005-4187

Malware in sbrugna...

3.5CVSS6.4AI score0.01144EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2001-1239

Malware in sbrugna...

3.6CVSS6.4AI score0.00464EPSS
SaveExploits1References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2012-0822

Malware in sbrugna...

4.3CVSS6.1AI score0.02348EPSS
SaveExploits0References14
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2014-4863

Malware in sbrugna...

4.3CVSS6.2AI score0.01312EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2012-5456

Malware in sbrugna...

4.3CVSS6.1AI score0.0181EPSS
SaveExploits0References7
Rows per page
Query Builder