Поиск уязвимостей
Количество 24
Количество 24
ALT-PU-2026-4106
ALT-PU-2026-4106: package `sogo` update to version 5.12.5-alt1
ALT-PU-2026-14680
ALT-PU-2026-14680: package `sogo` update to version 5.12.10-alt1
CVE-2025-63499
Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the theme parameter.
CVE-2025-63499
Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the theme parameter.
CVE-2025-63499
Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the ...
GHSA-mrxw-g8fq-xg2c
Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the theme parameter.
CVE-2025-71276
SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories.
CVE-2025-71276
SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories.
CVE-2025-71276
SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, ...
ROS-20261002-80-0175
Уязвимость sogo
ROS-20261002-73-0146
Уязвимость sogo
GHSA-c38q-j2vf-4r9p
SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories.
CVE-2026-3054
A vulnerability was identified in Alinto SOGo 5.12.3/5.12.4. This impacts an unknown function. The manipulation of the argument hint leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-3054
A vulnerability was identified in Alinto SOGo 5.12.3/5.12.4. This impacts an unknown function. The manipulation of the argument hint leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-3054
A vulnerability was identified in Alinto SOGo 5.12.3/5.12.4. This impa ...
CVE-2026-33550
SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length (only 12 digits instead of the 20 recommended).
CVE-2026-33550
SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length (only 12 digits instead of the 20 recommended).
CVE-2026-33550
SOGo before 5.12.5 does not renew the OTP if a user disables/enables i ...
ROS-20261002-80-0174
Уязвимость sogo
ROS-20261002-73-0145
Уязвимость sogo
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2026-4106 ALT-PU-2026-4106: package `sogo` update to version 5.12.5-alt1 | CVSS3: 6.1 | 8 месяцев назад | |
| ALT-PU-2026-14680 ALT-PU-2026-14680: package `sogo` update to version 5.12.10-alt1 | CVSS3: 6.1 | 2 месяца назад | |
 | CVE-2025-63499 Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the theme parameter. | CVSS3: 6.1 | 0% Низкий | 11 месяцев назад |
 | CVE-2025-63499 Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the theme parameter. | CVSS3: 6.1 | 0% Низкий | 11 месяцев назад |
| CVE-2025-63499 Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the ... | CVSS3: 6.1 | 0% Низкий | 11 месяцев назад |
| GHSA-mrxw-g8fq-xg2c Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the theme parameter. | CVSS3: 6.1 | 0% Низкий | 11 месяцев назад |
| CVE-2025-71276 SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories. | CVSS3: 6.1 | 0% Низкий | 8 месяцев назад |
| CVE-2025-71276 SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories. | CVSS3: 6.1 | 0% Низкий | 8 месяцев назад |
| CVE-2025-71276 SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, ... | CVSS3: 6.1 | 0% Низкий | 8 месяцев назад |
 | ROS-20261002-80-0175 Уязвимость sogo | CVSS3: 6.1 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-73-0146 Уязвимость sogo | CVSS3: 6.1 | 0% Низкий | около 1 месяца назад |
| GHSA-c38q-j2vf-4r9p SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories. | CVSS3: 6.4 | 0% Низкий | 8 месяцев назад |
| CVE-2026-3054 A vulnerability was identified in Alinto SOGo 5.12.3/5.12.4. This impacts an unknown function. The manipulation of the argument hint leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. | CVSS3: 6.1 | 0% Низкий | 9 месяцев назад |
| CVE-2026-3054 A vulnerability was identified in Alinto SOGo 5.12.3/5.12.4. This impacts an unknown function. The manipulation of the argument hint leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. | CVSS3: 6.1 | 0% Низкий | 9 месяцев назад |
| CVE-2026-3054 A vulnerability was identified in Alinto SOGo 5.12.3/5.12.4. This impa ... | CVSS3: 6.1 | 0% Низкий | 9 месяцев назад |
| CVE-2026-33550 SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length (only 12 digits instead of the 20 recommended). | CVSS3: 2.6 | 0% Низкий | 8 месяцев назад |
| CVE-2026-33550 SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length (only 12 digits instead of the 20 recommended). | CVSS3: 2.6 | 0% Низкий | 8 месяцев назад |
| CVE-2026-33550 SOGo before 5.12.5 does not renew the OTP if a user disables/enables i ... | CVSS3: 2.6 | 0% Низкий | 8 месяцев назад |
| ROS-20261002-80-0174 Уязвимость sogo | CVSS3: 5.3 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-73-0145 Уязвимость sogo | CVSS3: 5.3 | 0% Низкий | около 1 месяца назад |
Уязвимостей на страницу