Show filters
41 Total Results
Displaying 31-40 of 41
Sort by:
Attacker Value
Unknown
CVE-2010-2779
Disclosure Date: January 28, 2011 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise 8.x before 8.0 SP2 allows remote attackers to inject arbitrary web script or HTML via a crafted message, related to "replies."
0
Attacker Value
Unknown
CVE-2010-4325
Disclosure Date: January 28, 2011 (last updated October 04, 2023)
Buffer overflow in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP2 allows remote attackers to execute arbitrary code via a crafted TZID variable in a VCALENDAR message.
0
Attacker Value
Unknown
CVE-2010-4326
Disclosure Date: January 28, 2011 (last updated October 04, 2023)
Multiple buffer overflows in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via variables in a VCALENDAR message, as demonstrated by a long (1) REQUEST-STATUS, (2) TZNAME, (3) COMMENT, or (4) RRULE variable in this message.
0
Attacker Value
Unknown
CVE-2009-4662
Disclosure Date: March 03, 2010 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 7.0 before 7.03 HP4 and 8.0 before 8.0 SP1 allows remote attackers to inject arbitrary web script or HTML via the User.Theme.index parameter.
0
Attacker Value
Unknown
CVE-2009-1636
Disclosure Date: May 26, 2009 (last updated October 04, 2023)
Multiple buffer overflows in the Internet Agent (aka GWIA) component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to execute arbitrary code via (1) a crafted e-mail address in an SMTP session or (2) an SMTP command.
0
Attacker Value
Unknown
CVE-2009-1634
Disclosure Date: May 26, 2009 (last updated October 04, 2023)
The WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 does not properly implement session management mechanisms, which allows remote attackers to gain access to user accounts via unspecified vectors.
0
Attacker Value
Unknown
CVE-2009-1635
Disclosure Date: May 22, 2009 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to inject arbitrary web script or HTML via (1) the User.lang parameter to the login page (aka gw/webacc), (2) style expressions in a message that contains an HTML file, or (3) vectors associated with incorrect protection mechanisms against scripting, as demonstrated using whitespace between JavaScript event names and values.
0
Attacker Value
Unknown
CVE-2009-0410
Disclosure Date: February 03, 2009 (last updated October 04, 2023)
Off-by-one error in the SMTP daemon in GroupWise Internet Agent (GWIA) in Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03, 7.03HP1a, and 8.0 allows remote attackers to execute arbitrary code via a long e-mail address in a malformed RCPT command, leading to a buffer overflow.
0
Attacker Value
Unknown
CVE-2009-0274
Disclosure Date: February 03, 2009 (last updated October 04, 2023)
Unspecified vulnerability in WebAccess in Novell GroupWise 6.5, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 might allow remote attackers to obtain sensitive information via a crafted URL, related to conversion of POST requests to GET requests.
0
Attacker Value
Unknown
CVE-2009-0272
Disclosure Date: February 02, 2009 (last updated October 04, 2023)
Cross-site request forgery (CSRF) vulnerability in Novell GroupWise WebAccess 6.5x, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 allows remote attackers to insert e-mail forwarding rules, and modify unspecified other configuration settings, as arbitrary users via unknown vectors.
0
