Debian: Security Advisory (DLA-3090-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3090-1] php-horde-turba security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3090-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb August 31, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3089-1] php-horde-mime-viewer security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3089-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb August 31, 2022 https://wiki.debian.org/LTS -...

Debian dla-3090 : php-horde-turba - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3090 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3090-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-3089 : php-horde-mime-viewer - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3089 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3089-1 [email protected] https://www.debian.org/lts/security/...

Remote Code Execution (RCE)

php-horde-turba is vulnerable to remote code execution. The vulnerability exists due to a default configuration and can be exploited without knowledge of the configuration of the targeted Horde instance allowing an attacker to inject maliciously crafted script via a malicious email...

Debian: Security Advisory (DLA-3045-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3045-1] php-horde-mime-viewer security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3045-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb June 06, 2022 https://wiki.debian.org/LTS -...

Debian DLA-3045-1 : php-horde-mime-viewer - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-3045 advisory. - lib/Horde/Mime/Viewer/Ooo.php in Horde MimeViewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail Edition. This...

Fedora: Security Advisory for php-horde-Horde-Text-Filter (FEDORA-2021-f8368da9af)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 32 : php-horde-Horde-Text-Filter (2021-cbfa969c98)

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-cbfa969c98 advisory. - HordeTextFilter 2.3.7 mjr SECURITY: Fix XSS via Text2Html filter Reported by: Alex Birnberg, CVE 2021-26929 FEDORA-2021-cbfa969c98 Note that Nessus has not...

Fedora: Security Advisory for php-horde-Horde-Text-Filter (FEDORA-2021-cbfa969c98)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 33 : php-horde-Horde-Text-Filter (2021-f8368da9af)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-f8368da9af advisory. - HordeTextFilter 2.3.7 mjr SECURITY: Fix XSS via Text2Html filter Reported by: Alex Birnberg, CVE 2021-26929 FEDORA-2021-f8368da9af Note that Nessus has not...

[SECURITY] Fedora 33 Update: php-horde-Horde-Text-Filter-2.3.7-1.fc33

Common methods for fitering and converting text...

Debian DLA-2564-1 : php-horde-text-filter security update

Alex Birnberg discovered a cross-site scripting XSS vulnerability in the Horde Application Framework, more precisely its Text Filter API. An attacker could take control of a user's mailbox by sending a crafted e-mail. CVE-2021-26929 An XSS issue was discovered in Horde Groupware Webmail Edition...

Debian: Security Advisory (DLA-2564-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2564-1] php-horde-text-filter security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2564-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler February 18, 2021 https://wiki.debian.org/LTS -...

Cross-Site Scripting (XSS)

php-horde is vulnerable to cross-site scripting XSS. A remote attacker is able to inject and execute arbitrary Javascript in a user' s browser via the Color field in a Create Task List action...

Authentication Bypass

php-horde-gollem is vulnerable to authentication bypass. The File Manager gollem module allows remote attackers to bypass Horde authentication for file downloads via a malicious fn parameter that corresponds to the exact filename...

Debian DLA-2350-1 : php-horde-kronolith security update

In Horde Groupware, there has been an XSS via the Name field during creation of a new Resource. This could have been leveraged for remote code execution after compromising an administrator account, because the CVE-2015-7984 CSRF protection mechanism can then be bypassed. For Debian 9 stretch, thi...