| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2016-4026 | 4.3 | An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. The content sanitizer component has an issue with filtering malicious content in case invalid HTML code is provided. In such cases the filter will output a unsanitized represent | 2018-10-19 15:46:00 | 2016-12-15 06:59:00 |
| CVE-2016-3174 | 4.3 | An issue was discovered in Open-Xchange OX AppSuite before 7.8.0-rev27. The "defer" servlet offers to redirect a client to a specified URL. Since some checks were missing, arbitrary URLs could be provided as redirection target. Users can be tricked t | 2018-10-19 15:46:00 | 2016-12-15 06:59:00 |
| CVE-2016-3173 | 3.5 | An issue was discovered in Open-Xchange OX AppSuite before 7.8.0-rev27. The aria-label parameter of tiles at the Portal can be used to inject script code. Those labels use the name of the file (e.g. an image) which gets displayed at the portal applic | 2018-10-19 15:46:00 | 2016-12-15 06:59:00 |
| CVE-2016-2840 | 4.3 | An issue was discovered in Open-Xchange Server 6 / OX AppSuite before 7.8.0-rev26. The "session" parameter for file-download requests can be used to inject script code that gets reflected through the subsequent status page. Malicious script code can | 2018-10-19 15:46:00 | 2016-12-15 06:59:00 |
| CVE-2015-8542 | 4.0 | An issue was discovered in Open-Xchange Guard before 2.2.0-rev8. The "getprivkeybyid" API call is used to download a PGP Private Key for a specific user after providing authentication credentials. Clients provide the "id" and "cid" parameter to speci | 2018-10-19 15:46:00 | 2016-12-15 06:59:00 |
| CVE-2006-2572 | 2.6 | Cross-site scripting (XSS) vulnerability in index.php in DGBook 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) homepage, (3) email, and (4) address parameters. | 2018-10-19 15:46:00 | 2006-05-24 23:02:00 |
| CVE-2006-0747 | 5.0 | Integer underflow in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a font file with an odd number of blue values, which causes the underflow when decrementing by 2 in a context that assumes an even number of val | 2018-10-19 15:46:00 | 2006-05-23 10:06:00 |
| CVE-2006-0748 | 9.3 | Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via "an invalid and non-sensical ordering of table-related tags" that | 2018-10-19 15:46:00 | 2006-04-14 10:02:00 |
| CVE-2006-0745 | 7.2 | X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid, which allows local users to bypass intended restrictions and (1) execute ar | 2018-10-19 15:46:00 | 2006-03-21 02:06:00 |
| CVE-2006-0746 | 7.5 | Certain patches for kpdf do not include all relevant patches from xpdf that were associated with CVE-2005-3627, which allows context-dependent attackers to exploit vulnerabilities that were present in CVE-2005-3627. | 2018-10-19 15:46:00 | 2006-03-09 00:02:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: