80 matches found
CVE-2023-1977 Booking Manager < 2.0.29 - Subscriber+ SSRF
The Booking Manager WordPress plugin before 2.0.29 does not validate URLs input in it's admin panel or in shortcodes for showing events from a remote .ics file, allowing an attacker with privileges as low as Subscriber to perform SSRF attacks on the sites internal network...
SUSE CVE-2016-5825
The icalparserparsestring function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted ics file...
CVE-2022-32739
When Secure::DisableBanner system configuration has been disabled and agent shares his calendar via public URL, received ICS file contains OTRS release number...
Design/Logic Flaw
When Secure::DisableBanner system configuration has been disabled and agent shares his calendar via public URL, received ICS file contains OTRS release number...
CVE-2022-32739
When Secure::DisableBanner system configuration has been disabled and agent shares his calendar via public URL, received ICS file contains OTRS release number...
CVE-2022-32739
CVE-2022-32739 involves OTRS: when Secure::DisableBanner is disabled and an agent shares a calendar via a public URL, the ICS export leaks the OTRS release number. The linked documents explicitly describe the ICS file containing the OTRS release version, linking to multiple advisories and vulnera...
CVE-2022-32739: Exposure of Sensitive Information to an Unauthorized Actor
When Secure::DisableBanner system configuration has been disabled and agent shares his calendar via public URL, received ICS file contains OTRS release number...
Huawei EulerOS: Security Advisory for libical (EulerOS-SA-2019-2607)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP3 : libical (EulerOS-SA-2019-2607)
According to the versions of the libical packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file.CVE-2016-9584 ...
EulerOS 2.0 SP5 : libical (EulerOS-SA-2019-1915)
According to the version of the libical packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file.CVE-2016-9584 Not...
Security update for MozillaThunderbird (important)
openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2019:0249-1 Rating: important References: 1122983 1125330 Cross-References: CVE-2016-5824 CVE-2018-12405 CVE-2018-17466 CVE-2018-18335 CVE-2018-18356 CVE-2018-18492 CVE-2018-18493 CVE-2018-18494...
Denial Of Service (DoS)
libical.so is vulnerable to a denial of service attack. A malicious user can pass an ics file that when parsed, causes a use-after-free that can crash the application...
Denial Of Service (DoS)
libical.so is vulnerable to denial of service DoS attacks. A malicious user can pass an ics file to the application to cause an out-of-bounds heap read that can crash the application...
Denial Of Service (DoS) Through Use-After-Free (UAF)
libical.so is vulnerable to denial of service DoS through use-after-free UAF attacks. The vulnerability exists when a use-after-free UAF can be triggered while parsing a malicious ics file, causing the denial of service DoS attack...
SUSE-SU-2018:0119-1 Recommended update for libical
This update for libical fixes the following issues: Security issues fixed: - CVE-2016-5823: The icalpropertynewclone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file. bnc986632 - CVE-2016-5824: libical 1.0 allows remote...
openSUSE Security Update : libical (openSUSE-2017-869)
This update for libical fixes the following issues : Security issues fixed : - CVE-2016-5824: libical 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file. bsc986639 - CVE-2016-5827: The icaltimefromstring function in libical 0.47 and 1.0 allows remote...
SUSE SLED12 / SLES12 Security Update : libical (SUSE-SU-2017:1989-1)
This update for libical fixes the following issues: Security issues fixed : - CVE-2016-5824: libical 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file. bsc986639 - CVE-2016-5827: The icaltimefromstring function in libical 0.47 and 1.0 allows remote...
CVE-2016-5825
The icalparserparsestring function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted ics file...