Lucene search
K

60 matches found

seebug.org
seebug.org
added 2014/07/01 12:0 a.m.30 views

Suidperl 5.00503 Mail Shell Escape Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/1547/info The interaction between some security checks performed by suidperl, the setuid version of perl, and the /bin/mail program creates a scenario that allows local malicious users to execute commands with root...

7.1AI score
Exploits0
NVD
NVD
added 2014/04/05 9:55 p.m.13 views

CVE-2012-5565

Cross-site scripting XSS vulnerability in js/compose-dimp.js in Horde Internet Mail Program IMP before 5.0.24, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted name for an attached file, related to the dynamic vi...

4.3CVSS5.5AI score0.01795EPSS
Exploits0References5
NVD
NVD
added 2014/04/05 9:55 p.m.15 views

CVE-2012-6640

Cross-site scripting XSS vulnerability in Horde Internet Mail Program IMP before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted SVG image attachment, a different vulnerability than CVE-2012-5565...

4.3CVSS5.4AI score0.01832EPSS
Exploits0References3
OSV
OSV
added 2014/04/05 9:55 p.m.7 views

CVE-2012-6640

Cross-site scripting XSS vulnerability in Horde Internet Mail Program IMP before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted SVG image attachment, a different vulnerability than CVE-2012-5565...

5.4AI score
Exploits0References3
Prion
Prion
added 2014/04/05 9:55 p.m.13 views

Cross site scripting

Cross-site scripting XSS vulnerability in Horde Internet Mail Program IMP before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted SVG image attachment, a different vulnerability than CVE-2012-5565...

4.3CVSS5.8AI score0.01832EPSS
Exploits0References3Affected Software2
UbuntuCve
UbuntuCve
added 2014/04/05 9:55 p.m.23 views

CVE-2012-6640

Cross-site scripting XSS vulnerability in Horde Internet Mail Program IMP before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted SVG image attachment, a different vulnerability than CVE-2012-5565...

4.3CVSS6AI score0.01832EPSS
Exploits0References4
Cvelist
Cvelist
added 2014/04/05 9:0 p.m.21 views

CVE-2012-5565

Cross-site scripting XSS vulnerability in js/compose-dimp.js in Horde Internet Mail Program IMP before 5.0.24, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted name for an attached file, related to the dynamic vi...

5.4AI score0.01795EPSS
Exploits0References5
CVE
CVE
added 2014/04/05 9:0 p.m.50 views

CVE-2012-6640

Cross-site scripting (XSS) in Horde Internet Mail Program (IMP) before 5.0.22, used with Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted SVG image attachment. No remediation details are provided in the supplied documents.

4.3CVSS5.6AI score0.01832EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2014/04/05 9:0 p.m.50 views

CVE-2012-5565

CVE-2012-5565 is an XSS vulnerability in Horde IMP (js/compose-dimp.js) used with Horde Groupware Webmail Edition prior to 4.0.9. The issue allows remote attackers to inject arbitrary web script or HTML by supplying a crafted name for an attached file in the dynamic view, affecting Horde IMP befo...

4.3CVSS5.6AI score0.01795EPSS
Exploits0References5Affected Software1
Debian CVE
Debian CVE
added 2014/04/05 9:0 p.m.24 views

CVE-2012-6640

Cross-site scripting XSS vulnerability in Horde Internet Mail Program IMP before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted SVG image attachment, a different vulnerability than CVE-2012-5565...

4.3CVSS5.5AI score0.01832EPSS
Exploits0
Fedora
Fedora
added 2010/11/05 10:54 p.m.25 views

[SECURITY] Fedora 13 Update: horde-3.3.9-1.fc13

The Horde Framework provides a common structure and interface for Horde applications such as IMP, a web-based mail program. This RPM is required for all other Horde module RPMs. The Horde Project writes web applications in PHP and releases them under Open Source licenses. For more information...

6.8CVSS0.03893EPSS
Exploits1
Fedora
Fedora
added 2010/11/05 4:44 a.m.32 views

[SECURITY] Fedora 12 Update: horde-3.3.9-1.fc12

The Horde Framework provides a common structure and interface for Horde applications such as IMP, a web-based mail program. This RPM is required for all other Horde module RPMs. The Horde Project writes web applications in PHP and releases them under Open Source licenses. For more information...

6.8CVSS0.03893EPSS
Exploits1
Fedora
Fedora
added 2010/07/27 2:28 a.m.24 views

[SECURITY] Fedora 13 Update: horde-3.3.8-1.fc13

The Horde Framework provides a common structure and interface for Horde applications such as IMP, a web-based mail program. This RPM is required for all other Horde module RPMs. The Horde Project writes web applications in PHP and releases them under Open Source licenses. For more information...

5CVSS6.4AI score0.01929EPSS
Exploits0
securityvulns
securityvulns
added 2010/06/07 12:0 a.m.52 views

Multiple browsers DoS

Mail program compose message window is created for avery frame with mailto:, news:, nntp:, etc URI...

2.5AI score
Exploits0References5Affected Software4
OpenVAS
OpenVAS
added 2010/04/06 12:0 a.m.36 views

Fedora Update for horde FEDORA-2010-5483

Check for the Version of horde OpenVAS Vulnerability Test Fedora Update for horde FEDORA-2010-5483 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

6.4CVSS0.1AI score0.41263EPSS
Exploits21References2
Fedora
Fedora
added 2010/04/01 1:40 a.m.39 views

[SECURITY] Fedora 11 Update: horde-3.3.6-1.fc11

The Horde Framework provides a common structure and interface for Horde applications such as IMP, a web-based mail program. This RPM is required for all other Horde module RPMs. The Horde Project writes web applications in PHP and releases them under Open Source licenses. For more information...

6.4CVSS0.41263EPSS
Exploits21
Tenable Nessus
Tenable Nessus
added 2009/07/21 12:0 a.m.41 views

openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-333)

This update brings the Mozilla Thunderbird E-Mail program to version 2.0.0.18. It fixes following security problems : CVE-2008-5012 / MFSA 2008-48: Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when...

10CVSS8.5AI score0.05865EPSS
Exploits1References11
OpenVAS
OpenVAS
added 2009/02/17 12:0 a.m.11 views

Fedora Update for horde FEDORA-2008-5683

Check for the Version of horde OpenVAS Vulnerability Test Fedora Update for horde FEDORA-2008-5683 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

7.4AI score
Exploits0References2
Fedora
Fedora
added 2008/03/13 7:37 a.m.10 views

[SECURITY] Fedora 8 Update: horde-3.1.7-1.fc8

The Horde Framework provides a common structure and interface for Horde applications such as IMP, a web-based mail program. This RPM is required for all other Horde module RPMs. The Horde Project writes web applications in PHP and releases them under Open Source licenses. For more information...

Exploits0
Fedora
Fedora
added 2008/02/28 9:35 p.m.28 views

[SECURITY] Fedora 7 Update: horde-3.1.6-1.fc7

The Horde Framework provides a common structure and interface for Horde applications such as IMP, a web-based mail program. This RPM is required for all other Horde module RPMs. The Horde Project writes web applications in PHP and releases them under Open Source licenses. For more information...

5.8CVSS0.01774EPSS
Exploits1
Rows per page
Query Builder