Vendor
Open-Xchange
77 known vulnerabilities.
53 results · Clear filters · Feed
-
Medium 5.4
References to the "app loader" functionality could contain redirects to unexpected locations. Attackers could forge app…
-
Medium 6.5
Processing of user-defined mail search expressions is not limited. Availability of OX App Suite could be reduced due to…
-
Medium 6.5
Processing time of drive search expressions now gets monitored, and the related request is terminated if a resource thr…
-
Medium 6.5
Processing of user-defined DAV user-agent strings is not limited. Availability of OX App Suite could be reduced due to …
-
Medium 6.1
User ID references at mentions in document comments were not correctly sanitized. Script code could be injected to a us…
-
Medium 5.4
User-defined script code could be stored for a upsell related shop URL. This code was not correctly sanitized when addi…
-
Medium 5.4
Users were able to define disclaimer texts for an upsell shop dialog that would contain script code that was not saniti…
-
Medium 5.4
The "upsell" widget at the portal page could be abused to inject arbitrary script code. Attackers that manage to lure u…
-
Medium 5.3
An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4, allowing an attacker i…
-
Medium 5.3
An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 3.7.4 and 4.0.4, allowing a r…
-
Medium 5.3
An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4, allowing an attacker i…
-
Medium 5.9
An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a …
-
Medium 5.3
An issue has been found in PowerDNS Authoritative Server before 3.4.11 and 4.0.2 allowing a remote, unauthenticated att…