Open-xchange Gmbh vulnerabilities
77 CVEs and advisories name Open-xchange Gmbh as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-41708References to the "app loader" functionality could contain redirects to unexpected locations.
- CVE-2023-41707Processing of user-defined mail search expressions is not limited.
- CVE-2023-41706Processing time of drive search expressions now gets monitored, and the related request is terminated if a resource threshold is reached.
- CVE-2023-41705Processing of user-defined DAV user-agent strings is not limited.
- CVE-2023-41704Processing of CID references at E-Mail can be abused to inject malicious script code that passes the sanitization engine.
- CVE-2023-41703User ID references at mentions in document comments were not correctly sanitized.
- CVE-2023-41710User-defined script code could be stored for a upsell related shop URL.
- CVE-2023-29052Users were able to define disclaimer texts for an upsell shop dialog that would contain script code that was not sanitized correctly.
- CVE-2023-29051User-defined OXMF templates could be used to access a limited part of the internal OX App Suite Java API.
- CVE-2023-29050The optional "LDAP contacts provider" could be abused by privileged users to inject LDAP filter strings that allow to access content outside
- CVE-2023-29049The "upsell" widget at the portal page could be abused to inject arbitrary script code.
- CVE-2023-29048A component for parsing OXMF templates could be abused to execute arbitrary system commands that would be executed as the non-privileged run
- CVE-2016-7074An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4, allowing an attacker in position of man-in-
- CVE-2016-7073An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4, allowing an attacker in position of man-in-
- CVE-2016-7069An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend.
- CVE-2016-7068An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 3.7.4 and 4.0.4, allowing a remote, unauthenticate
- CVE-2016-7072An issue has been found in PowerDNS Authoritative Server before 3.4.11 and 4.0.2 allowing a remote, unauthenticated attacker to cause a deni