DSA-2278-1 horde3 - several

Bulletin has no description...

Debian DSA-1829-1 : sork-passwd-h3 - insufficient input sanitising

It was discovered that sork-passwd-h3, a Horde3 module for users to change their password, is prone to a cross-site scripting attack via the backend parameter. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

Debian DSA-1897-1 : horde3 - insufficient input sanitization

Stefan Esser discovered that Horde, a web application framework providing classes for dealing with preferences, compression, browser detection, connection tracking, MIME, and more, is insufficiently validating and escaping user provided input. The HordeFormTypeimage form element allows to reuse a...

Debian DSA-1966-1 : horde3 - insufficient input sanitising

Several vulnerabilities have been found in horde3, the horde web application framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-3237 It has been discovered that horde3 is prone to cross-site scripting attacks via crafted number preferences o...

Debian Security Advisory DSA 1966-1 (horde3)

The remote host is missing an update to horde3 announced via advisory DSA 1966-1. OpenVAS Vulnerability Test $Id: deb19661.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1966-1 horde3 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian: Security Advisory (DSA-1966-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1966-1] New horde3 packages fix cross-site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-1966-1 [email protected] http://www.debian.org/security/ Steffen Joeris January 07, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1966-1] New horde3 packages fix cross-site scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1966-1 [email protected] http://www.debian.org/security/ Steffen Joeris January 07, 2010 http://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-1897-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-1897-1 horde3 - arbitrary code execution

Bulletin has no description...

DSA-1829-1 sork-passwd-h3 - cross-site scripting

Bulletin has no description...

Debian Security Advisory DSA 1765-1 (horde3)

The remote host is missing an update to horde3 announced via advisory DSA 1765-1. OpenVAS Vulnerability Test $Id: deb17651.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1765-1 horde3 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1765-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1765-1 : horde3 - Multiple vulnerabilities

Several vulnerabilities have been found in horde3, the horde web application framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0932 Gunnar Wrobel discovered a directory traversal vulnerability, which allows attackers to include and execute...

[SECURITY] [DSA 1765-1] New horde3 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1765-1 [email protected] http://www.debian.org/security/ Steffen Joeris April 08, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1765-1] New horde3 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1765-1 [email protected] http://www.debian.org/security/ Steffen Joeris April 08, 2009 http://www.debian.org/security/faq -...

DSA-1765-1 horde3 - several vulnerabilities

Bulletin has no description...

Debian: Security Advisory (DSA-1642-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1642-1 (horde3)

The remote host is missing an update to horde3 announced via advisory DSA 1642-1. OpenVAS Vulnerability Test $Id: deb16421.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1642-1 horde3 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1642-1 : horde3 - XSS

Will Drewry discovered that Horde allows remote attackers to send an email with a crafted MIME attachment filename attribute to perform cross site scripting. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...