1686 matches found
Updated ruby-ox packages fix security vulnerability
In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parseobj CVE-2017-15928. Also, the package was broken and has been fixed to function properly...
MGASA-2019-0123 Updated ruby-ox packages fix security vulnerability
In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parseobj CVE-2017-15928. Also, the package was broken and has been fixed to function properly...
Open-Xchange AppSuite 7.10.1 Information Disclosure / Improper Access Control
Product: OX App Suite Vendor: OX Software GmbH Internal reference: 61771 Bug ID Vulnerability type: Information Exposure CWE-200 Vulnerable version: 7.10.1 and earlier Vulnerable component: backend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed Version: 7.6.3-rev44,...
CVE-2018-13104
OX App Suite 7.8.4 and earlier allows XSS. Internal reference: 58742 Bug ID...
CVE-2018-13103
OX App Suite 7.8.4 and earlier allows SSRF...
CVE-2018-13103
OX App Suite 7.8.4 and earlier allows SSRF...
Cross site scripting
OX App Suite 7.8.4 and earlier allows XSS. Internal reference: 58742 Bug ID...
CVE-2018-13104
OX App Suite 7.8.4 and earlier allows XSS. Internal reference: 58742 Bug ID...
CVE-2018-13104
Open-Xchange OX App Suite is affected by a cross-site scripting vulnerability (CVE-2018-13104) in the frontend handling of mail attachments. The issue arises from attachment file names that can be used to inject script code, potentially enabling code execution in a victim’s browser (session hijac...
CVE-2018-13103
OX App Suite 7.8.4 and earlier allows SSRF...
CVE-2018-13103
OX App Suite 7.8.4 and earlier is vulnerable to a server-side request forgery (SSRF) as described by CVE-2018-13103. The CVSS metrics in the sources indicate MEDIUM severity with network attack vector and low privileges required. The documents confirm the SSRF issue but do not provide a concrete ...
CVE-2018-13103: Server-Side Request Forgery (SSRF)
OX App Suite 7.8.4 and earlier allows SSRF...
PT-2019-8925
Name of the Vulnerable Software and Affected Versions OX App Suite versions 7.8.4 and earlier Description The issue allows for XSS, which can be exploited. Recommendations For OX App Suite versions 7.8.4 and earlier, at the moment, there is no information about a newer version that contains a fix...
PT-2019-8924
Name of the Vulnerable Software and Affected Versions OX App Suite versions 7.8.4 and earlier Description The issue allows for Server-Side Request Forgery SSRF, which is a type of attack where an attacker can trick a server into making requests to internal or external systems. Recommendations For...
CVE-2018-13104: Improper Neutralization of Input During Web Page Generation
OX App Suite 7.8.4 and earlier allows XSS. Internal reference: 58742 Bug ID...
CVE-2018-12611
OX App Suite 7.8.4 and earlier allows Directory Traversal...
CVE-2018-12609
OX App Suite 7.8.4 and earlier allows Server-Side Request Forgery...
CVE-2018-12610
OX App Suite 7.8.4 and earlier allows Information Exposure...