İçeriğe atla
Noroxi

Open-Xchange kayıtları

open-xchange üreticisine ait 274 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
8
Düzeltme kaydı olan
%6,6
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

274 kayıt
  • CVE-2024-4367
    56Planlayın

    A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context.

    YüksekCVSS 8,8Kavram kanıtıEPSS %70

    mozilla · firefox14 May 2024

  • CVE-2022-29851
    40Planlayın

    documentconverter in OX App Suite through 7.10.6, in a non-default configuration with ghostscript, allows OS Command Injection because file

    KritikCVSS 9,8İstismar yokEPSS %3

    open-xchange · ox app suite25 Eki 2022

  • CVE-2022-24405
    40Planlayın

    OX App Suite through 7.10.6 allows OS Command Injection via a serialized Java class to the Documentconverter API.

    KritikCVSS 9,8İstismar yokEPSS %3

    open-xchange · ox app suite27 Tem 2022

  • CVE-2022-23100
    40Planlayın

    OX App Suite through 7.10.6 allows OS Command Injection via Documentconverter (e.g., through an email attachment).

    KritikCVSS 9,8İstismar yokEPSS %2

    open-xchange · ox app suite27 Tem 2022

  • CVE-2023-29050
    39İzleyin

    The optional "LDAP contacts provider" could be abused by privileged users to inject LDAP filter strings that allow to access content outside

    KritikCVSS 9,6İstismar yokEPSS %1

    open-xchange · ox app suite8 Oca 2024

  • CVE-2019-7158
    39İzleyin

    OX App Suite 7.10.0 and earlier has Incorrect Access Control.

    KritikCVSS 9,8İstismar yokEPSS %1

    open-xchange · open-xchange appsuite17 Haz 2019

  • CVE-2017-5210
    39İzleyin

    Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Information Exposure.

    KritikCVSS 9,8İstismar yokEPSS %1

    open-xchange · open-xchange appsuite23 May 2019

  • CVE-2017-5863
    39İzleyin

    Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control.

    KritikCVSS 9,8İstismar yokEPSS %1

    open-xchange · open-xchange appsuite22 May 2019

  • CVE-2017-5212
    39İzleyin

    Open-Xchange GmbH OX App Suite 7.8.3 is affected by: Incorrect Access Control.

    KritikCVSS 9,8İstismar yokEPSS %1

    open-xchange · open-xchange appsuite23 May 2019

  • CVE-2017-17060
    39İzleyin

    OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions.

    KritikCVSS 9,8İstismar yokEPSS %1

    open-xchange · open-xchange appsuite23 May 2019

  • CVE-2020-12645
    39İzleyin

    OX App Suite 7.10.1 to 7.10.3 has improper input validation for rate limits with a crafted User-Agent header, spoofed vacation notices, and

    KritikCVSS 9,8İstismar yokEPSS %1

    open-xchange · open-xchange appsuite31 Ağu 2020

  • CVE-2017-13667
    39İzleyin

    OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF.

    KritikCVSS 9,9İstismar yokEPSS %0

    open-xchange · open-xchange appsuite23 May 2019

  • CVE-2023-26443
    39İzleyin

    Full-text autocomplete search allows user-provided SQL syntax to be injected to SQL statements.

    KritikCVSS 9,8İstismar yokEPSS %0

    open-xchange · open-xchange appsuite backend2 Ağu 2023

  • CVE-2018-5752
    36İzleyin

    The backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39, 7.8.3 before 7.8.3-rev44, and 7.8.4 before

    YüksekCVSS 8,8Kavram kanıtıEPSS %4

    open-xchange · open-xchange appsuite15 Haz 2018

  • CVE-2015-8542
    36İzleyin

    An issue was discovered in Open-Xchange Guard before 2.2.0-rev8.

    YüksekCVSS 8,8İstismar yokEPSS %2

    open-xchange · ox guard15 Ara 2016

  • CVE-2026-27851
    36İzleyin

    When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabli

    KritikCVSS 9,1İstismar yokEPSS %0

    dovecot · dovecot12 May 2026

  • CVE-2023-29048
    35İzleyin

    A component for parsing OXMF templates could be abused to execute arbitrary system commands that would be executed as the non-privileged run

    YüksekCVSS 8,8İstismar yokEPSS %1

    open-xchange · ox app suite8 Oca 2024

  • CVE-2023-26436
    35İzleyin

    Attackers with access to the "documentconverterws" API were able to inject serialized Java objects, that were not properly checked during de

    YüksekCVSS 8,8İstismar yokEPSS %1

    open-xchange · open-xchange appsuite backend20 Haz 2023

  • CVE-2017-8340
    35İzleyin

    Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control.

    YüksekCVSS 8,8İstismar yokEPSS %1

    open-xchange · open-xchange appsuite22 May 2019

  • CVE-2017-6912
    35İzleyin

    Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control.

    YüksekCVSS 8,8İstismar yokEPSS %1

    open-xchange · open-xchange appsuite22 May 2019

  • CVE-2018-10986
    35İzleyin

    OX Guard 2.8.0 has CSRF.

    YüksekCVSS 8,8İstismar yokEPSS %0

    open-xchange · ox guard3 Tem 2019

  • CVE-2023-26453
    35İzleyin

    Requests to cache an image could be abused to include SQL queries that would be executed unchecked.

    YüksekCVSS 8,8İstismar yokEPSS %0

    open-xchange · open-xchange appsuite2 Kas 2023

  • CVE-2023-26454
    35İzleyin

    Requests to fetch image metadata could be abused to include SQL queries that would be executed unchecked.

    YüksekCVSS 8,8İstismar yokEPSS %0

    open-xchange · open-xchange appsuite2 Kas 2023

  • CVE-2023-26452
    35İzleyin

    Requests to cache an image and return its metadata could be abused to include SQL queries that would be executed unchecked.

    YüksekCVSS 8,8İstismar yokEPSS %0

    open-xchange · open-xchange appsuite2 Kas 2023

  • CVE-2019-11521
    33İzleyin

    OX App Suite 7.10.1 allows Content Spoofing.

    YüksekCVSS 8,1İstismar yokEPSS %1

    open-xchange · open-xchange appsuite20 Ağu 2019