137 matches found
MailEnable 跨站脚本漏洞
MailEnable is a commercial email server software designed for Windows operating systems that provides end-to-end email hosting and collaboration solutions. MailEnable suffers from a cross-site scripting vulnerability that originates from the lack of effective filtering and escaping of user-suppli...
SOGo <= 5.12.4 XSS Vulnerability
SOGo is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:alinto:sogo"; if...
EUVD-2025-201283
Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting XSS via the theme parameter...
DEBIAN-CVE-2025-63499
Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting XSS via the theme parameter...
CVE-2025-63499
Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting XSS via the theme parameter...
UBUNTU-CVE-2025-63499
Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting XSS via the theme parameter...
CVE-2025-63499
Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting XSS via the theme parameter...
SOGo 安全漏洞
SOGo is a very fast and extensible modern collaboration suite from Alinto Open Source. It provides calendaring, address book management and a full-featured webmail client as well as resource sharing and permission handling. A security vulnerability exists in SOGo version 5.12.3, which stems from...
CVE-2025-63499
SOGo 5.12.3 is affected by a Cross Site Scripting (XSS) vulnerability triggered via the theme parameter. The issue is confirmed in multiple sources (e.g., Debian LTS DLA-4434-1) with remediation by upgrading to 5.0.1-4+deb11u3 on Debian 11 (Bullseye). Public CVE is CVE-2025-63499; CVSSv3 base sco...
CVE-2025-63499
Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting XSS via the theme parameter...
Linux Distros Unpatched Vulnerability : CVE-2025-63499
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting XSS via the theme parameter. CVE-2025-63499 Note that Nessus relies on the presence of the package as...
CVE-2025-63499
Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting XSS via the theme parameter...
WordPress All in One Music Player plugin path traversal vulnerability
WordPress All in One Music Player plugin is a plugin with integrated music playback functionality, mainly used for WooCommerce, Dokan, WCFM Marketplace and other multi-platform e-commerce systems. A path traversal vulnerability exists in the WordPress All in One Music Player plugin, which stems...
EUVD-2011-5110
Malware in sbrugna...
EUVD-2008-4470
Malware in sbrugna...
EUVD-2018-2049
Malware in sbrugna...
EUVD-2008-0153
Malware in sbrugna...
EUVD-2006-2418
Malware in sbrugna...