1812 matches found
[SECURITY] [DLA 1398-1] php-horde-crypt security update
Package : php-horde-crypt Version : 2.5.0-5+deb8u1 CVE ID : CVE-2017-7413 CVE-2017-7414 Debian Bug : 859635 It was discovered that in Horde-Crypt, a cryptographic library and part of the PHP Horde framework, a command injection was possible when a Horde user used the PGP features to view an...
DLA-1398-1 php-horde-crypt - security update
Bulletin has no description...
Debian DLA-1395-1 : php-horde-image security update
It was discovered that there were two remote code execution vulnerabilities in php-horde-image, the image processing library for the Horde groupware tool : - CVE-2017-9774: A remote code execution vulnerability RCE that was exploitable by a logged-in user sending a maliciously crafted HTTP GET...
[SECURITY] [DLA 1395-1] php-horde-image security update
Package : php-horde-image Version : 2.1.0-4+deb8u1 CVE IDs : CVE-2017-9774 CVE-2017-14650 Debian Bugs : 865505 876400 It was discovered that there were two remote code execution vulnerabilities in php-horde-image, the image processing library for the Horde https://www.horde.org/ groupware tool:...
DLA-1395-1 php-horde-image - security update
Bulletin has no description...
DEBIAN-CVE-2014-3999
The HordeLdap library before 2.0.6 for Horde allows remote attackers to bypass authentication by leveraging knowledge of the LDAP bind user DN...
CVE-2014-3999
The HordeLdap library before 2.0.6 for Horde allows remote attackers to bypass authentication by leveraging knowledge of the LDAP bind user DN...
Fedora 27 : php-horde-Horde-Image (2017-1136e13b6a)
HordeImage 2.5.1 - mjr SECURITY: Fix more potential places for command injections. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible withou...
Fedora 27 : php-horde-passwd (2017-e3fcecbae7)
passwd 5.0.7 - jan Officially support PHP 7. - jan SECURITY: Fix open redirects. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...
Fedora 27 : php-horde-nag (2017-52ed023208)
nag 4.2.17 - jan SECURITY: Fix unauthorized access to task exports. - jan Fix regression when exporting single tags to iCalendar CATEGORIES. - jan Officially support PHP 7. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...
Fedora 27 : php-horde-wicked (2017-346d6e00dd)
wicked 2.0.8 - jan SECURITY: Fix unauthorized access to page attachments. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...
Horde Groupware SQL Injection Vulnerability
Horde Groupware is an enterprise browser based on the Communication Suite from Horde USA. The browser supports sending and receiving e-mail, managing and sharing calendars, contacts and tasks, and more. A SQL injection vulnerability exists in Horde Groupware 5.2.22 and earlier versions. A remote...
Horde Gollem Module Unauthorized File Download Vulnerability - Windows
Horde Groupware is prone to an unauthorized file download vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Horde Gollem Module Unauthorized File Download Vulnerability - Linux
Horde Groupware is prone to an unauthorized file download vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Horde Groupware <= 5.2.22 Multiple Vulnerabilities
Horde Groupware is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:horde:hordegroupware";...
Horde Groupware Cross-Site Scripting Vulnerability (CNVD-2017-37742)
Horde Groupware is a free, enterprise-grade, browser-based collaboration suite. A cross-site scripting vulnerability exists in Horde Groupware version 5.2.19. A cross-site scripting attack can be performed via the URL field in the "Calendar - New Event" action, which can be used for remote code...
Horde Groupware Cross-Site Scripting Vulnerability (CNVD-2017-37743)
Horde Groupware is a free, enterprise-grade, browser-based collaboration suite. A cross-site scripting vulnerability exists in Horde Groupware 5.2.19. A cross-site scripting attack can be performed via the Color field in the "Create Task List" action, which can lead to remote code execution...
Horde Groupware Cross-Site Scripting Vulnerability (CNVD-2017-37741)
Horde Groupware is an enterprise browser based on the Communication Suite from Horde USA. The browser supports sending and receiving e-mail, managing and sharing calendars, contacts and tasks, and more. A cross-site scripting vulnerability exists in Horde Groupware version 5.2.19. A remote attack...
