12 matches found
EUVD-2020-29481
Malware in sbrugna...
EUVD-2024-36871
Malicious code in bioql PyPI...
CVE-2020-8633
An issue was discovered in Zimbra Collaboration Suite ZCS before 8.8.15 Patch 7. When grantors revoked a shared calendar in Outlook, the calendar stayed mounted and accessible...
CVE-2024-37887 Nextcloud Server's events information leaked with shared calendars on recurrence exceptions
Nextcloud Server is a self hosted personal cloud system. Private shared calendar events' recurrence exceptions can be read by sharees. It is recommended that the Nextcloud Server is upgraded to 27.1.10 or 28.0.6 or 29.0.1 and that the Nextcloud Enterprise Server is upgraded to 27.1.10 or 28.0.6 o...
Design/Logic Flaw
When Secure::DisableBanner system configuration has been disabled and agent shares his calendar via public URL, received ICS file contains OTRS release number...
Description of the security update for Outlook 2016: July 14, 2020
Description of the security update for Outlook 2016: July 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Outlook software if the software does not correctly handle objects in memory. To learn more about the vulnerability, see Microsof...
Zimbra Collaboration Suite (ZCS) Undo Shared Calendar Accessibility Vulnerability
Zimbra Collaboration Suite ZCS is a collaboration software suite that includes an email server and web client. An undo shared calendar accessibility vulnerability exists in Zimbra Collaboration Suite ZCS versions prior to 8.8.15 Patch 7. The vulnerability stems from the fact that after an attacke...
Nextcloud: Event privacy level does not work in Thunderbird
Events in shared calendar with changed privacy level to any other than public are shown in Thunderbird as public anyway with all details How to reproduce: 1 - create an event in user A's calendar shared to user B 2 - change privacy setting of this event to any other than public 3 - open Thunderbi...
Nextcloud Server Information Disclosure Vulnerability
Nextcloud is an open source self-hosted file synchronization and sharing communication application platform from Nextcloud Germany.Nextcloud Server is one of the server version. An information disclosure vulnerability exists in versions of Nextcloud Server prior to 11.0.3. An attacker could explo...
HP TouchSmart Calendar 4.1.4245 - Insecure File Permissions Privilege Escalation Vulnerability
Exploit for windows platform in category local exploits + Credits: John Page aka hyp3rlinx Vendor: ========== www.hp.com Product: =========================================== Hewlett Packard TouchSmart Calendar Service File version : 4.1.4245 HP TouchSmart Calendar is a shared calendar where you c...
PlenoFamily: shared calendar - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application PlenoFamily: shared calendar published at the 'play' market has multiple vulnerabilities...
CVE-1999-1172
The vulnerability CVE-1999-1172 affects Maximizer Enterprise 4 calendar and address book. According to the provided descriptions, the issue allows arbitrary users to modify another user’s calendar during sharing, indicating an access control/authorization weakness in the calendar-sharing feature....