Show filters
41 Total Results
Displaying 1-10 of 41
Sort by:
Attacker Value
Unknown
CVE-2014-0610
Disclosure Date: September 05, 2014 (last updated October 05, 2023)
The client in Novell GroupWise before 8.0.3 HP4, 2012 before SP3, and 2014 before SP1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.
0
Attacker Value
Unknown
CVE-2013-1087
Disclosure Date: July 15, 2013 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the client in Novell GroupWise through 8.0.3 HP3, and 2012 through SP2, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML via the body of an e-mail message.
0
Attacker Value
Unknown
CVE-2013-1086
Disclosure Date: April 19, 2013 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise before 8.0.3 HP3, and 2012 before SP2, allows remote attackers to inject arbitrary web script or HTML via vectors involving an onError attribute.
0
Attacker Value
Unknown
CVE-2012-0439
Disclosure Date: February 24, 2013 (last updated October 05, 2023)
An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code via (1) a pointer argument to the SetEngine method or (2) an XPItem pointer argument to an unspecified method.
0
Attacker Value
Unknown
CVE-2013-0804
Disclosure Date: February 24, 2013 (last updated October 05, 2023)
The client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference) via unspecified vectors.
0
Attacker Value
Unknown
CVE-2012-4912
Disclosure Date: September 28, 2012 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to inject arbitrary web script or HTML via a crafted signature in an HTML e-mail message.
0
Attacker Value
Unknown
CVE-2012-0419
Disclosure Date: September 28, 2012 (last updated October 05, 2023)
Directory traversal vulnerability in the agent HTTP interfaces in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to read arbitrary files via directory traversal sequences in a request.
0
Attacker Value
Unknown
CVE-2012-0417
Disclosure Date: September 28, 2012 (last updated October 05, 2023)
Integer overflow in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to execute arbitrary code via unspecified vectors.
0
Attacker Value
Unknown
CVE-2012-0418
Disclosure Date: September 28, 2012 (last updated October 05, 2023)
Unspecified vulnerability in the client in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 on Windows allows user-assisted remote attackers to execute arbitrary code via a crafted file.
0
Attacker Value
Unknown
CVE-2012-0272
Disclosure Date: September 19, 2012 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 allows remote attackers to inject arbitrary web script or HTML via the merge parameter.
0
