1311 matches found
CVE-2017-12885
OX Software GmbH App Suite 7.8.4 and earlier is affected by: Cross Site Scripting XSS...
CVE-2017-12885
OX App Suite by OX Software GmbH (versions 7.8.4 and earlier) is affected by a Cross Site Scripting (XSS) vulnerability. The Red Hat entry and CNVD summary both confirm the issue and cite a root cause described as a lack of proper validation of client data by the web application, enabling potenti...
dovecot -- json encoder crash
Aki Tuomi reports: CVE-2019-10691: Trying to login with 8bit username containing invalid UTF8 input causes auth process to crash if auth policy is enabled. This could be used rather easily to cause a DoS. Similar crash also happens during mail delivery when using invalid UTF8 in From or Subject...
MGASA-2019-0123 Updated ruby-ox packages fix security vulnerability
In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parseobj CVE-2017-15928. Also, the package was broken and has been fixed to function properly...
Updated ruby-ox packages fix security vulnerability
In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parseobj CVE-2017-15928. Also, the package was broken and has been fixed to function properly...
Open-Xchange AppSuite 7.10.1 Information Disclosure / Improper Access Control
Product: OX App Suite Vendor: OX Software GmbH Internal reference: 61771 Bug ID Vulnerability type: Information Exposure CWE-200 Vulnerable version: 7.10.1 and earlier Vulnerable component: backend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed Version: 7.6.3-rev44,...
CVE-2018-13103
OX App Suite 7.8.4 and earlier allows SSRF...
CVE-2018-13103
OX App Suite 7.8.4 and earlier allows SSRF...
CVE-2018-13104
OX App Suite 7.8.4 and earlier allows XSS. Internal reference: 58742 Bug ID...
Cross site scripting
OX App Suite 7.8.4 and earlier allows XSS. Internal reference: 58742 Bug ID...
CVE-2018-13104
OX App Suite 7.8.4 and earlier allows XSS. Internal reference: 58742 Bug ID...
CVE-2018-13104
Open-Xchange OX App Suite is affected by a cross-site scripting vulnerability (CVE-2018-13104) in the frontend handling of mail attachments. The issue arises from attachment file names that can be used to inject script code, potentially enabling code execution in a victim’s browser (session hijac...
CVE-2018-13103
OX App Suite 7.8.4 and earlier allows SSRF...
CVE-2018-13103
OX App Suite 7.8.4 and earlier is vulnerable to a server-side request forgery (SSRF) as described by CVE-2018-13103. The CVSS metrics in the sources indicate MEDIUM severity with network attack vector and low privileges required. The documents confirm the SSRF issue but do not provide a concrete ...
CVE-2018-12610
OX App Suite 7.8.4 and earlier allows Information Exposure...
CVE-2018-12610
OX App Suite 7.8.4 and earlier allows Information Exposure...
CVE-2018-12609
OX App Suite 7.8.4 and earlier allows Server-Side Request Forgery...
CVE-2018-12611
OX App Suite 7.8.4 and earlier allows Directory Traversal...