Поиск уязвимостей
Количество 13
Количество 13
ALT-PU-2018-3699
ALT-PU-2018-3699: package `sogo` update to version 3.2.10.20171010-alt3
CVE-2015-5395
Cross-site request forgery (CSRF) vulnerability in SOGo before 3.1.0.
CVE-2015-5395
Cross-site request forgery (CSRF) vulnerability in SOGo before 3.1.0.
CVE-2015-5395
Cross-site request forgery (CSRF) vulnerability in SOGo before 3.1.0.
GHSA-79jp-f6c4-wq28
Cross-site request forgery (CSRF) vulnerability in SOGo before 3.1.0.
CVE-2016-6191
Multiple cross-site scripting (XSS) vulnerabilities in the View Raw Source page in the Web Calendar in SOGo before 3.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Description, (2) Location, (3) URL, or (4) Title field.
CVE-2016-6191
Multiple cross-site scripting (XSS) vulnerabilities in the View Raw Source page in the Web Calendar in SOGo before 3.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Description, (2) Location, (3) URL, or (4) Title field.
CVE-2016-6191
Multiple cross-site scripting (XSS) vulnerabilities in the View Raw So ...
CVE-2016-6189
Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows remote authenticated users to obtain sensitive information by reading the fields in the (1) ics or (2) XML calendar feeds.
CVE-2016-6189
Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows remote authenticated users to obtain sensitive information by reading the fields in the (1) ics or (2) XML calendar feeds.
CVE-2016-6189
Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows ...
GHSA-px99-x547-mjjw
Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows remote authenticated users to obtain sensitive information by reading the fields in the (1) ics or (2) XML calendar feeds.
GHSA-mcp4-fq7j-35pr
Multiple cross-site scripting (XSS) vulnerabilities in the View Raw Source page in the Web Calendar in SOGo before 3.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Description, (2) Location, (3) URL, or (4) Title field.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2018-3699 ALT-PU-2018-3699: package `sogo` update to version 3.2.10.20171010-alt3 | CVSS3: 8.8 | больше 8 лет назад | |
 | CVE-2015-5395 Cross-site request forgery (CSRF) vulnerability in SOGo before 3.1.0. | CVSS3: 8.8 | 1% Низкий | около 9 лет назад |
 | CVE-2015-5395 Cross-site request forgery (CSRF) vulnerability in SOGo before 3.1.0. | CVSS3: 8.8 | 1% Низкий | около 9 лет назад |
| CVE-2015-5395 Cross-site request forgery (CSRF) vulnerability in SOGo before 3.1.0. | CVSS3: 8.8 | 1% Низкий | около 9 лет назад |
| GHSA-79jp-f6c4-wq28 Cross-site request forgery (CSRF) vulnerability in SOGo before 3.1.0. | CVSS3: 8.8 | 1% Низкий | больше 4 лет назад |
| CVE-2016-6191 Multiple cross-site scripting (XSS) vulnerabilities in the View Raw Source page in the Web Calendar in SOGo before 3.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Description, (2) Location, (3) URL, or (4) Title field. | CVSS3: 6.1 | 1% Низкий | больше 9 лет назад |
| CVE-2016-6191 Multiple cross-site scripting (XSS) vulnerabilities in the View Raw Source page in the Web Calendar in SOGo before 3.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Description, (2) Location, (3) URL, or (4) Title field. | CVSS3: 6.1 | 1% Низкий | больше 9 лет назад |
| CVE-2016-6191 Multiple cross-site scripting (XSS) vulnerabilities in the View Raw So ... | CVSS3: 6.1 | 1% Низкий | больше 9 лет назад |
| CVE-2016-6189 Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows remote authenticated users to obtain sensitive information by reading the fields in the (1) ics or (2) XML calendar feeds. | CVSS3: 4.3 | 1% Низкий | больше 9 лет назад |
| CVE-2016-6189 Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows remote authenticated users to obtain sensitive information by reading the fields in the (1) ics or (2) XML calendar feeds. | CVSS3: 4.3 | 1% Низкий | больше 9 лет назад |
| CVE-2016-6189 Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows ... | CVSS3: 4.3 | 1% Низкий | больше 9 лет назад |
| GHSA-px99-x547-mjjw Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows remote authenticated users to obtain sensitive information by reading the fields in the (1) ics or (2) XML calendar feeds. | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| GHSA-mcp4-fq7j-35pr Multiple cross-site scripting (XSS) vulnerabilities in the View Raw Source page in the Web Calendar in SOGo before 3.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Description, (2) Location, (3) URL, or (4) Title field. | CVSS3: 6.1 | 1% Низкий | больше 4 лет назад |
Уязвимостей на страницу