Novell GroupWise 6.5 WebAccess User.Id Parameter Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25126/info Novell GroupWise WebAccess is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site...

Novell GroupWise Messenger <= 2.1.0 Arbitrary Memory Corruption

No description provided by source. Luigi Auriemma Application: Novell GroupWise Messenger http://www.novell.com/products/groupwise/ Versions: = 2.1.0 Platforms: Windows, Linux, NetWare Bug: write4 Exploitation: remote, versus server Date: 16 Feb 2012 found 10 May 2011 Author: Luigi Auriemma e-mai...

Novell Groupwise 8.0.2 HP3 and 2012 Integer Overflow Vulnerability

No description provided by source. Application: Novell Groupwise Platforms: Windows Version: 8.0.2 HP3 and 2012 Secunia: SA50622 PRL: 2012-28 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3...

Novell Groupwise 8.02 Addressbook Memory Corruption - Ver2 (CVE-2011-4189)

A code execution vulnerability has been reported in Novell GroupWise. The vulnerability is due to a heap buffer overflow while parsing tokens within a specially crafted Novell Address Book .nab file. A remote attacker can exploit this issue by enticing a target user to open a specially crafted .n...

[SECURITY] Fedora 19 Update: pidgin-2.10.9-1.fc19

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

Novell GroupWise Client 8.x < 8.0.3 Hot Patch 3 / 2012.x < 2012 SP2 XSS

The version of Novell GroupWise Client installed on the remote Windows host is 8.x prior to 8.0.3 Hot Patch 3 8.0.3.28711 or 2012.x prior to 2012 SP2 12.0.2.18211. It is, therefore, reportedly affected by a cross-site scripting vulnerability. C Tenable Network Security, Inc. include'compat.inc'; ...

CVE-2013-1087

Cross-site scripting XSS vulnerability in the client in Novell GroupWise through 8.0.3 HP3, and 2012 through SP2, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML via the body of an e-mail message...

Cross site scripting

Cross-site scripting XSS vulnerability in the client in Novell GroupWise through 8.0.3 HP3, and 2012 through SP2, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML via the body of an e-mail message...

CVE-2013-1087

Cross-site scripting XSS vulnerability in the client in Novell GroupWise through 8.0.3 HP3, and 2012 through SP2, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML via the body of an e-mail message...

CVE-2013-1087

CVE-2013-1087 is a cross-site scripting (XSS) vulnerability in the Windows client of Novell GroupWise up to 8.0.3 HP3 and 2012 SP2, where an attacker can inject arbitrary script/HTML via the body of an e‑mail. The issue requires user-assisted interaction and affects GroupWise on Windows; exploita...

KLA10278 CI vulnerability in Novell GroupWise

XSS vulnerability was found in Novell GroupWise. By exploiting this vulnerability malicious users can inject arbitrary web script. This vulnerability can be exploited remotely via a specially designed e-mail message. Original advisories - Related products Novell-Groupwise CVE list CVE-2013-1087...

Novell GroupWise Client for Windows ActiveX Code Execution (CVE-2012-0439)

A remote code execution vulnerability exists in the ActiveX control for Novell GroupWise Client for Windows...

Novell GroupWise Client ActiveX gwmim1.ocx Untrusted Pointer Dereference (CVE-2013-0804)

An untrusted pointer dereference vulnerability has been reported in the ActiveX control for Novell GroupWise Client for Windows...

Novell GroupWise Client ActiveX gwabdlg.dll Untrusted Pointer Dereference (CVE-2013-0804)

An untrusted pointer dereference vulnerability has been reported in Novell GroupWise Client for Windows...

Novell GroupWise Internet Agent Unsupported (deprecated)

This plugin has been deprecated in favor of a combined plugin for the detection of all unsupported GroupWise software. Please use the plugin groupwiseunsupported.nasl instead. %NASLMINLEVEL 999999 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2016/08/15. Deprecated by...

CVE-2013-1086

Cross-site scripting XSS vulnerability in WebAccess in Novell GroupWise before 8.0.3 HP3, and 2012 before SP2, allows remote attackers to inject arbitrary web script or HTML via vectors involving an onError attribute...

Cross site scripting

Cross-site scripting XSS vulnerability in WebAccess in Novell GroupWise before 8.0.3 HP3, and 2012 before SP2, allows remote attackers to inject arbitrary web script or HTML via vectors involving an onError attribute...

CVE-2013-1086

Cross-site scripting XSS vulnerability in WebAccess in Novell GroupWise before 8.0.3 HP3, and 2012 before SP2, allows remote attackers to inject arbitrary web script or HTML via vectors involving an onError attribute...

CVE-2013-1086

CVE-2013-1086 is a Cross-site scripting (XSS) vulnerability in WebAccess of Novell GroupWise prior to 8.0.3 HP3, and 2012 prior to SP2. The issue permits remote attackers to inject arbitrary web script or HTML via onError attribute vectors. Connected documents confirm the affected product (Novell...

Novell GroupWise Client IMG Tag SRC Parameter Buffer Overflow - High Confidence (CVE-2007-6435)

Novell GroupWise is a client-server collaborative software and email system provided by Novell. The Novell GroupWise Client application is capable of communicating with Novell Group server, as well as Internet email gateways using SMTP, POP, and IMAP protocols. A buffer overflow vulnerability has...