Lucene search
+L

728 matches found

OSV
OSV
added 2020/03/10 8:15 p.m.7 views

CVE-2020-9044

XXE vulnerability exists in the Metasys family of product Web Services which has the potential to facilitate DoS attacks or harvesting of ASCII server files. This affects Johnson Controls' Metasys Application and Data Server ADS, ADS-Lite versions 10.1 and prior; Metasys Extended Application and...

9.1CVSS7.3AI score0.01286EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/02/20 12:0 a.m.10 views

Cisco Unified Contact Center Enterprise Denial of Service Vulnerability

Cisco Unified Contact Center Enterprise utilizes an IP infrastructure to provide skills-based contact routing, voice self-service, computer telephony integration CTI, and multichannel contact management. A denial of service vulnerability exists in the Live Data server in Cisco Unified Contact...

7.1CVSS7.2AI score0.00895EPSS
SaveExploits0References1
OSV
OSV
added 2020/02/19 8:15 p.m.5 views

CVE-2020-3163

A vulnerability in the Live Data server of Cisco Unified Contact Center Enterprise could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability exists because the affected software improperly manages resources when processing...

5.9CVSS6.1AI score0.00895EPSS
SaveExploits0References1
NVD
NVD
added 2020/02/19 8:15 p.m.27 views

CVE-2020-3163

A vulnerability in the Live Data server of Cisco Unified Contact Center Enterprise could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability exists because the affected software improperly manages resources when processing...

7.1CVSS6.5AI score0.00895EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2020/02/19 7:15 p.m.8 views

CVE-2020-3163 Cisco Unified Contact Center Enterprise Denial of Service Vulnerability

A vulnerability in the Live Data server of Cisco Unified Contact Center Enterprise could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability exists because the affected software improperly manages resources when processing...

6.8CVSS7.7AI score0.00895EPSS
SaveExploits0References1
OSV
OSV
added 2020/02/06 3:15 p.m.3 views

DEBIAN-CVE-2013-4166

The gpgctxaddrecipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and earlier and Evolution Data Server 3.9.5 and earlier does not properly select the GPG key to use for email encryption, which might cause the email to be encrypted with the wrong key and allow remote attackers...

7.5CVSS7.1AI score0.0189EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2020/02/06 2:29 p.m.109 views

CVE-2013-4166

The gpgctxaddrecipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and earlier and Evolution Data Server 3.9.5 and earlier does not properly select the GPG key to use for email encryption, which might cause the email to be encrypted with the wrong key and allow remote attackers...

7.5CVSS7.4AI score0.0189EPSS
SaveExploits0
Cvelist
Cvelist
added 2020/02/06 2:29 p.m.40 views

CVE-2013-4166

The gpgctxaddrecipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and earlier and Evolution Data Server 3.9.5 and earlier does not properly select the GPG key to use for email encryption, which might cause the email to be encrypted with the wrong key and allow remote attackers...

7.3AI score0.0189EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2019/12/20 8:47 a.m.24 views

Security Bulletin: IBM Data Server Driver for JDBC and SQLJ is affected by a 3RD PARTY Unsafe deserialization

Summary Unsafe deserialization in DB2 JDBC driver Vulnerability Details CVEID: CVE-2017-1677 DESCRIPTION: IBM Data Server Driver for JDBC and SQLJ IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 deserializes the contents of /tmp/connlicj.bin which leads to object injection and...

7.8CVSS1.1AI score0.00718EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2019/11/25 11:15 p.m.24 views

CVE-2011-3355

evolution-data-server3 3.0.3 through 3.2.1 used insecure non-SSL connection when attempting to store sent email messages into the Sent folder, when the Sent folder was located on the remote server. An attacker could use this flaw to obtain login credentials of the victim...

7.3CVSS7.1AI score0.0078EPSS
SaveExploits1References5
Prion
Prion
added 2019/11/25 11:15 p.m.18 views

Design/Logic Flaw

evolution-data-server3 3.0.3 through 3.2.1 used insecure non-SSL connection when attempting to store sent email messages into the Sent folder, when the Sent folder was located on the remote server. An attacker could use this flaw to obtain login credentials of the victim...

4.3CVSS7AI score0.0078EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2019/11/25 10:30 p.m.47 views

CVE-2011-3355

CVE-2011-3355 affects evolution-data-server3 versions 3.0.3 through 3.2.1. The flaw is an insecure non-SSL connection when storing sent email messages into the Sent folder located on a remote server, which could allow an attacker to obtain login credentials. Connected documents corroborate the sa...

7.3CVSS7AI score0.0078EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2019/11/25 10:30 p.m.30 views

CVE-2011-3355

evolution-data-server3 3.0.3 through 3.2.1 used insecure non-SSL connection when attempting to store sent email messages into the Sent folder, when the Sent folder was located on the remote server. An attacker could use this flaw to obtain login credentials of the victim...

7.1AI score0.0078EPSS
SaveExploits1References5
Oracle linux
Oracle linux
added 2019/11/14 12:0 a.m.21 views

evolution security and bug fix update

evolution 3.28.5-9 - Add patch for RH bug 1724984 ECompEditor Ensure attendee changes stored before save 3.28.5-8 - Add patch for RH bug 1724659 Make sure intltool-merge cache is created only once 3.28.5-7 - Add patch for RH bug 1724232 Help Contents F1 has a bad link to GNOME site...

8.1CVSS0.1AI score0.0099EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/05/31 12:0 a.m.24 views

Ubuntu 16.04 LTS / 18.04 LTS : Evolution Data Server vulnerability (USN-3998-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3998-1 advisory. Marcus Brinkmann discovered that Evolution Data Server did not correctly interpret the output from GPG when decrypting encrypted messages. Under certa...

6.5CVSS7AI score0.02443EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2019/05/31 12:0 a.m.37 views

Ubuntu: Security Advisory (USN-3998-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7AI score0.02443EPSS
SaveExploits1References2
OSV
OSV
added 2019/05/30 11:41 a.m.6 views

USN-3998-1 evolution-data-server vulnerability

Marcus Brinkmann discovered that Evolution Data Server did not correctly interpret the output from GPG when decrypting encrypted messages. Under certain circumstances, this could result in displaying clear-text portions of encrypted messages as though they were encrypted...

6.5CVSS6.8AI score0.02443EPSS
SaveExploits1References2
Ubuntu
Ubuntu
added 2019/05/30 11:41 a.m.214 views

USN-3998-1: Evolution Data Server vulnerability

Marcus Brinkmann discovered that Evolution Data Server did not correctly interpret the output from GPG when decrypting encrypted messages. Under certain circumstances, this could result in displaying clear-text portions of encrypted messages as though they were encrypted...

6.5CVSS6.9AI score0.02443EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2019/05/07 12:0 a.m.75 views

Fedora Update for evolution-data-server FEDORA-2019-3a2cc6a0b9

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.1CVSS8.1AI score0.0099EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/04/08 12:0 a.m.28 views

Fedora 29 : evolution-data-server / evolution-ews (2019-3a2cc6a0b9)

Security fix for CVE-2019-3890 - SSL Certificates are not validated Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

8.1CVSS7AI score0.0099EPSS
SaveExploits0References2
Rows per page
Query Builder