Show filters
13 Total Results
Displaying 11-13 of 13
Sort by:
Attacker Value
Unknown
CVE-2016-6189
Disclosure Date: February 17, 2017 (last updated November 26, 2024)
Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows remote authenticated users to obtain sensitive information by reading the fields in the (1) ics or (2) XML calendar feeds.
0
Attacker Value
Unknown
CVE-2016-6191
Disclosure Date: February 17, 2017 (last updated November 26, 2024)
Multiple cross-site scripting (XSS) vulnerabilities in the View Raw Source page in the Web Calendar in SOGo before 3.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Description, (2) Location, (3) URL, or (4) Title field.
0
Attacker Value
Unknown
CVE-2016-6188
Disclosure Date: February 03, 2017 (last updated November 25, 2024)
Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service (memory consumption) via a large number of attempts to upload a large attachment, related to temporary files.
0
