408 matches found
CVE-2015-5395
Cross-site request forgery CSRF vulnerability in SOGo before 3.1.0...
DEBIAN-CVE-2015-5395
Cross-site request forgery CSRF vulnerability in SOGo before 3.1.0...
UBUNTU-CVE-2015-5395
Cross-site request forgery CSRF vulnerability in SOGo before 3.1.0...
CVE-2015-5395
Cross-site request forgery CSRF vulnerability in SOGo before 3.1.0...
CVE-2015-5395
Cross-site request forgery CSRF vulnerability in SOGo before 3.1.0...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in SOGo before 3.1.0...
CVE-2015-5395
SOGo is affected by a CSRF vulnerability disclosed as CVE-2015-5395 in versions before 3.1.0. The provided documents describe the flaw as CSRF with potential unauthorized operations but do not include exploitation details or explicit remediation steps.
CVE-2015-5395
Cross-site request forgery CSRF vulnerability in SOGo before 3.1.0...
CVE-2015-5395
Cross-site request forgery CSRF vulnerability in SOGo before 3.1.0...
PT-2017-6851 · Inverse · Sogo
Name of the Vulnerable Software and Affected Versions: SOGo versions prior to 3.1.0 Description: A cross-site request forgery CSRF issue exists. This allows an attacker to perform unintended actions on a user's account. Recommendations: For versions prior to 3.1.0, update to version 3.1.0 or late...
Shinseiyo Sogo Soft Untrustworthy Search Path Vulnerability
Shinseiyo Sogo Soft is an online registration application system released by the Japanese Ministry of Justice.Installer is one of the installation programs. An untrusted search path vulnerability exists in the installer in Shinseiyo Sogo Soft 4.8A and earlier versions. An attacker can exploit thi...
CVE-2017-2232
Untrusted search path vulnerability in Installer of Shinseiyo Sogo Soft 4.8A and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2232
Untrusted search path vulnerability in Installer of Shinseiyo Sogo Soft 4.8A and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
Design/Logic Flaw
Untrusted search path vulnerability in Installer of Shinseiyo Sogo Soft 4.8A and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2232
The CVE-2017-2232 issue affects the Installer of Shinseiyo Sogo Soft (4.8A) and earlier. The vulnerability is an untrusted search path (CWE-427) in the installer that can allow an attacker to cause arbitrary code execution by placing a Trojan horse DLL in an untrusted directory, gaining privilege...
CVE-2017-2232
Untrusted search path vulnerability in Installer of Shinseiyo Sogo Soft 4.8A and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2016-6190
SOGo before 2.3.12 and 3.x before 3.1.1 does not restrict access to the UID and DTSTAMP attributes, which allows remote authenticated users to obtain sensitive information about appointments with the "View the Date & Time" restriction, as demonstrated by correlating UIDs and DTSTAMPs between all...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the View Raw Source page in the Web Calendar in SOGo before 3.1.3 allow remote attackers to inject arbitrary web script or HTML via the 1 Description, 2 Location, 3 URL, or 4 Title field...
CVE-2016-6191
Multiple cross-site scripting XSS vulnerabilities in the View Raw Source page in the Web Calendar in SOGo before 3.1.3 allow remote attackers to inject arbitrary web script or HTML via the 1 Description, 2 Location, 3 URL, or 4 Title field...