Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Debian Component: Horde Clear all filters
TI-2009-00886 CVE-2009-0932 · GHSA-j5w4-f7qm-4ww8

Directory traversal vulnerability in framework/Image/Image.php in Horde before 3.2.4 and…

Priority MEDIUM 59

Directory traversal vulnerability in framework/Image/Image.php in Horde before 3.2.4 and 3.3.3 and Horde Groupware before 1.1.5 allows remote attackers to include and execute arbitrary local files via directory traversal…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.47871 Published 2009-03-17 No fix listed CWE-22
TI-2009-00885 CVE-2009-0931 · GHSA-5mv3-qrx8-v8x3

Cross-site scripting (XSS) vulnerability in the tag cloud search script…

Priority LOW 24

Cross-site scripting (XSS) vulnerability in the tag cloud search script (horde/services/portal/cloud_search.php) in Horde before 3.2.4 and 3.3.3, and Horde Groupware before 1.1.5, allows remote attackers to inject arbitr…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02026 Published 2009-03-17 No fix listed CWE-79