85 matches found
CVE-2018-10986
OX Guard 2.8.0 has CSRF...
EUVD-2015-5650
Malware in sbrugna...
EUVD-2020-30246
Malware in sbrugna...
EUVD-2020-30247
Malware in sbrugna...
EUVD-2020-21332
Malware in sbrugna...
EUVD-2016-7736
Malware in sbrugna...
EUVD-2016-5034
Malware in sbrugna...
EUVD-2018-3037
Malware in sbrugna...
EUVD-2023-30276
Malicious code in bioql PyPI...
CVE-2023-26456
Users were able to set an arbitrary "product name" for OX Guard. The chosen value was not sufficiently sanitized before processing it at the user interface, allowing for indirect cross-site scripting attacks. Accounts that were temporarily taken over could be configured to trigger persistent code...
CVE-2020-9426
OX Guard 2.10.3 and earlier allows XSS...
CVE-2020-9427
OX Guard 2.10.3 and earlier allows SSRF...
CVE-2020-28944
OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds slowly or with a large amount of data...
CVE-2023-26456
Users were able to set an arbitrary "product name" for OX Guard. The chosen value was not sufficiently sanitized before processing it at the user interface, allowing for indirect cross-site scripting attacks. Accounts that were temporarily taken over could be configured to trigger persistent code...
CVE-2023-26456
Users were able to set an arbitrary "product name" for OX Guard. The chosen value was not sufficiently sanitized before processing it at the user interface, allowing for indirect cross-site scripting attacks. Accounts that were temporarily taken over could be configured to trigger persistent code...
Cross site scripting
Users were able to set an arbitrary "product name" for OX Guard. The chosen value was not sufficiently sanitized before processing it at the user interface, allowing for indirect cross-site scripting attacks. Accounts that were temporarily taken over could be configured to trigger persistent code...
CVE-2023-26456
Users were able to set an arbitrary "product name" for OX Guard. The chosen value was not sufficiently sanitized before processing it at the user interface, allowing for indirect cross-site scripting attacks. Accounts that were temporarily taken over could be configured to trigger persistent code...
CVE-2023-26456
CVE-2023-26456 affects Open-Xchange App Suite/OX Guard. The vulnerability stems from allowing arbitrary input for the product name, which was not sufficiently sanitized when processed in the UI, enabling indirect cross-site scripting and, in scenarios where accounts were temporarily taken over, p...
CVE-2023-26456
Users were able to set an arbitrary "product name" for OX Guard. The chosen value was not sufficiently sanitized before processing it at the user interface, allowing for indirect cross-site scripting attacks. Accounts that were temporarily taken over could be configured to trigger persistent code...
PT-2023-20649 · Ox Guard · Ox Guard
Name of the Vulnerable Software and Affected Versions: OX Guard affected versions not specified Description: The issue allows users to set an arbitrary "product name" for OX Guard, which was not sufficiently sanitized before processing it at the user interface. This enabled indirect cross-site...