Show filters
91 Total Results
Displaying 11-20 of 91
Sort by:
Attacker Value
Unknown
CVE-2013-1086
Disclosure Date: April 19, 2013 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise before 8.0.3 HP3, and 2012 before SP2, allows remote attackers to inject arbitrary web script or HTML via vectors involving an onError attribute.
0
Attacker Value
Unknown
CVE-2013-1085
Disclosure Date: March 29, 2013 (last updated October 05, 2023)
Stack-based buffer overflow in the nim: protocol handler in Novell GroupWise Messenger 2.04 and earlier, and Novell Messenger 2.1.x and 2.2.x before 2.2.2, allows remote attackers to execute arbitrary code via an import command containing a long string in the filename parameter.
0
Attacker Value
Unknown
CVE-2012-0439
Disclosure Date: February 24, 2013 (last updated October 05, 2023)
An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code via (1) a pointer argument to the SetEngine method or (2) an XPItem pointer argument to an unspecified method.
0
Attacker Value
Unknown
CVE-2013-0804
Disclosure Date: February 24, 2013 (last updated October 05, 2023)
The client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference) via unspecified vectors.
0
Attacker Value
Unknown
CVE-2012-4912
Disclosure Date: September 28, 2012 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to inject arbitrary web script or HTML via a crafted signature in an HTML e-mail message.
0
Attacker Value
Unknown
CVE-2012-0419
Disclosure Date: September 28, 2012 (last updated October 05, 2023)
Directory traversal vulnerability in the agent HTTP interfaces in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to read arbitrary files via directory traversal sequences in a request.
0
Attacker Value
Unknown
CVE-2012-0417
Disclosure Date: September 28, 2012 (last updated October 05, 2023)
Integer overflow in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to execute arbitrary code via unspecified vectors.
0
Attacker Value
Unknown
CVE-2012-0418
Disclosure Date: September 28, 2012 (last updated October 05, 2023)
Unspecified vulnerability in the client in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 on Windows allows user-assisted remote attackers to execute arbitrary code via a crafted file.
0
Attacker Value
Unknown
CVE-2012-0272
Disclosure Date: September 19, 2012 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 allows remote attackers to inject arbitrary web script or HTML via the merge parameter.
0
Attacker Value
Unknown
CVE-2011-3827
Disclosure Date: September 19, 2012 (last updated October 05, 2023)
The iCalendar component in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before Support Pack 3 allows remote attackers to cause a denial of service (out-of-bounds read and daemon crash) via a crafted date-time string in a .ics attachment.
0
