PT-2017-8929 · Inverse · Sogo

Name of the Vulnerable Software and Affected Versions: SOGo versions prior to 3.1.3 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities in the View Raw Source page of the Web Calendar. These vulnerabilities allow remote attackers to inject arbitrary web script or HTM...

CVE-2016-6188

Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service memory consumption via a large number of attempts to upload a large attachment, related to temporary files...

Memory corruption

Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service memory consumption via a large number of attempts to upload a large attachment, related to temporary files...

CVE-2016-6188

Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service memory consumption via a large number of attempts to upload a large attachment, related to temporary files...

DEBIAN-CVE-2016-6188

Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service memory consumption via a large number of attempts to upload a large attachment, related to temporary files...

UBUNTU-CVE-2016-6188

Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service memory consumption via a large number of attempts to upload a large attachment, related to temporary files...

CVE-2016-6188

Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service memory consumption via a large number of attempts to upload a large attachment, related to temporary files...

CVE-2016-6188

Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service memory consumption via a large number of attempts to upload a large attachment, related to temporary files...

CVE-2016-6188

CVE-2016-6188 affects SOGo 2.3.7. The issue is a memory leak caused by handling a large number of large attachments, related to temporary files, leading to denial-of-service via memory consumption. No explicit fixes or patch versions are detailed in the provided documents; exploitation details ar...

CVE-2016-6188

Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service memory consumption via a large number of attempts to upload a large attachment, related to temporary files...

SOGo Web Calendar Code Injection Vulnerability

SOGo is an extensible, modern collaboration suite that offers features such as management of calendars and address books, and full-featured Web mail client resource sharing. A code injection vulnerability exists in Web Calendar in SOGo version 2.1.1b. An attacker can exploit this vulnerability to...

SOGo Backend Calendar Access Restriction Bypass Vulnerability

SOGo is an extensible, modern collaboration suite that offers features such as management of calendars and address books, and full-featured Web mail client resource sharing. An access restriction bypass vulnerability exists in Backend Calendar in SOGo version 2.3.9. An attacker could exploit this...

SOGo Information Disclosure Vulnerability

SOGo is a scalable and modern collaboration suite. An information disclosure vulnerability exists in SOGo that can be exploited by an attacker to obtain sensitive information...

SOGo Denial of Service Vulnerability

SOGo is a scalable and modern collaboration suite. A denial of service vulnerability exists in SOGo, which can be exploited by an attacker to cause a denial of service by uploading a large attachment...

Debian DLA-487-1 : debian-security-support - Long term security support update

The Debian Long Term Support LTS Team is unable to continue supporting different packages in the extended life cycle of Wheezy LTS. The debian-security-support package provides the check-support-status tool that helps to warn the administrator about installed packages whose security support is...

CVE-2004-1771

CVE-2004-1771 affects Scalable OGo (SOGo) 1.0, where remote authenticated users can bypass intended permissions and view private appointments of other users. The provided sources confirm the affected product and the permission bypass impact, but do not specify the root cause details, vulnerable c...

CVE-2004-1771

Scalable OGo SOGo 1.0 allows remote authenticated users to bypass intended permissions and view private appointments of other users...

CVE-2004-1771

Scalable OGo SOGo 1.0 allows remote authenticated users to bypass intended permissions and view private appointments of other users...