Show filters
33 Total Results
Displaying 11-20 of 33
Sort by:
Attacker Value
Unknown
CVE-2010-4711
Disclosure Date: January 31, 2011 (last updated October 04, 2023)
Double free vulnerability in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allows remote attackers to execute arbitrary code via a large parameter in a LIST command.
0
Attacker Value
Unknown
CVE-2010-2777
Disclosure Date: January 28, 2011 (last updated October 04, 2023)
Stack-based buffer overflow in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise 7.x before 7.0 post-SP4 FTF and 8.x before 8.0 SP2 allows remote attackers to execute arbitrary code via a long mailbox name in a CREATE command.
0
Attacker Value
Unknown
CVE-2010-2778
Disclosure Date: January 28, 2011 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise 7.x before 7.0 post-SP4 FTF and 8.x before 8.0 SP2 allows remote attackers to inject arbitrary web script or HTML via a crafted message, related to a "Javascript XSS exploit."
0
Attacker Value
Unknown
CVE-2010-4325
Disclosure Date: January 28, 2011 (last updated October 04, 2023)
Buffer overflow in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP2 allows remote attackers to execute arbitrary code via a crafted TZID variable in a VCALENDAR message.
0
Attacker Value
Unknown
CVE-2010-4326
Disclosure Date: January 28, 2011 (last updated October 04, 2023)
Multiple buffer overflows in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via variables in a VCALENDAR message, as demonstrated by a long (1) REQUEST-STATUS, (2) TZNAME, (3) COMMENT, or (4) RRULE variable in this message.
0
Attacker Value
Unknown
CVE-2009-4662
Disclosure Date: March 03, 2010 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 7.0 before 7.03 HP4 and 8.0 before 8.0 SP1 allows remote attackers to inject arbitrary web script or HTML via the User.Theme.index parameter.
0
Attacker Value
Unknown
CVE-2009-3863
Disclosure Date: November 04, 2009 (last updated October 04, 2023)
Buffer overflow in the gxmim1.dll ActiveX control in Novell Groupwise Client 7.0.3.1294 allows remote attackers to cause a denial of service (application crash) via a long argument to the SetFontFace method.
0
Attacker Value
Unknown
CVE-2009-1636
Disclosure Date: May 26, 2009 (last updated October 04, 2023)
Multiple buffer overflows in the Internet Agent (aka GWIA) component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to execute arbitrary code via (1) a crafted e-mail address in an SMTP session or (2) an SMTP command.
0
Attacker Value
Unknown
CVE-2009-1634
Disclosure Date: May 26, 2009 (last updated October 04, 2023)
The WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 does not properly implement session management mechanisms, which allows remote attackers to gain access to user accounts via unspecified vectors.
0
Attacker Value
Unknown
CVE-2009-1762
Disclosure Date: May 22, 2009 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess login page (aka gw/webacc) in Novell GroupWise 7.x before 7.03 HP2 allow remote attackers to inject arbitrary web script or HTML via the (1) GWAP.version or (2) User.Theme (aka User.Theme.index) parameter.
0
