1686 matches found
CVE-2020-9426
OX Guard 2.10.3 and earlier allows XSS...
CVE-2020-9427
OX Guard 2.10.3 and earlier allows SSRF...
CVE-2020-9426
OX Guard 2.10.3 and earlier allows XSS...
CVE-2020-9427
OX Guard 2.10.3 and earlier allows SSRF...
Cross site scripting
OX Guard 2.10.3 and earlier allows XSS...
Server side request forgery (ssrf)
OX Guard 2.10.3 and earlier allows SSRF...
CVE-2020-9426
Open-Xchange Open-Xchange OX Guard 2.10.3 and earlier is affected by a Cross-Site Scripting (XSS) vulnerability in the WEB application due to inadequate validation of client data. The issue allows execution of client-side code via manipulated input (e.g., forged public-keys) displayed in Guard se...
CVE-2020-9426
OX Guard 2.10.3 and earlier allows XSS...
CVE-2020-9427
OX Guard 2.10.3 and earlier allows SSRF...
CVE-2020-9427
OX Guard 2.10.3 and earlier contains an SSRF vulnerability in the guard component. Affected product: Open-Xchange OX Guard (versions up to 2.10.3). Root cause: improper handling leading to Server-Side Request Forgery. Impact: as described in public advisories; exploit details are corroborated by ...
PT-2020-20651
Name of the Vulnerable Software and Affected Versions OX Guard versions 2.10.3 and earlier Description The issue allows for Server-Side Request Forgery SSRF, which is a type of attack where an attacker can trick a server into making requests to unintended locations. Recommendations For OX Guard...
OX Guard 2.10.3 Cross Site Scripting / Server-Side Request Forgery Vulnerabilities
Exploit for php platform in category web applications Product: OX Guard Vendor: OX Software GmbH Internal reference: GUARD-179 Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 2.10.3 Vulnerable component: guard Report confidence: Confirmed Solution status: Fixed by Vendor Fixed...
PT-2020-20650
Name of the Vulnerable Software and Affected Versions OX Guard versions 2.10.3 and earlier Description The issue allows for a Cross-Site Scripting XSS attack. Recommendations For OX Guard versions 2.10.3 and earlier, at the moment, there is no information about a newer version that contains a fix...
OX Guard 2.10.3 Cross Site Scripting / Server-Side Request Forgery
Product: OX Guard Vendor: OX Software GmbH Internal reference: GUARD-179 Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 2.10.3 Vulnerable component: guard Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 2.10.2-rev9, 2.10.3-rev4 Vendor notification...
OX App Suite / OX Documents 7.10.3 XSS / SSRF / Improper Validation
Dear subscribers, we're sharing our latest advisory with you and like to thank everyone who contributed in finding and solving those vulnerabilities. Feel free to join our bug bounty programs for OX AppSuite, Dovecot and PowerDNS at HackerOne. Yours sincerely, Martin Heiland, Open-Xchange GmbH...
Open-Xchange Dovecot 2.3.10 Null Pointer Dereference / Denial Of Service Vulnerabilities
------------------ Open-Xchange Security Advisory 2020-05-18 Product: Dovecot Vendor: OX Software GmbH Internal reference: DOV-3784 Vulnerability type: NULL pointer dereference CWE-476 Vulnerable version: 2.3.0 - 2.3.10 Vulnerable component: submission, lmtp Report confidence: Confirmed Solution...
CVE-2019-18846
OX App Suite through 7.10.2 allows SSRF...
Server side request forgery (ssrf)
OX App Suite through 7.10.2 allows SSRF...
CVE-2019-18846
OX App Suite/OX Documents 7.10.2 and earlier are affected by a Server-Side Request Forgery (SSRF) in the attachment API for Calendar/Tasks, where references to attachments could bypass host/protocol checks and cause content from local files or URLs to be added as attachments. Root cause: insuffic...