HA
Product
Horde Application Framework
9
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Horde Application Framework to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-7984 | – | Nov 19 | Multiple cross-site request forgery (CSRF) vulnerabilities in Horde before 5.2.8, Horde Groupware before 5.2.11, and Horde Groupware Webmail Edition before 5.2.11 allow remote… Affected: 5.0.0 before 5.2.8 |
| CVE-2014-1691 | – | Apr 1 | The framework/Util/lib/Horde/Variables.php script in the Util library in Horde before 5.1.1 allows remote attackers to conduct object injection attacks and execute arbitrary PHP… Affected: through 5.1.0; 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4 |
| CVE-2010-3077 | – | Nov 9 | Cross-site scripting (XSS) vulnerability in util/icon_browser.php in the Horde Application Framework before 3.3.9 allows remote attackers to inject arbitrary web script or HTML… Affected: through 3.3.8; 1.0.3; 1.1.1; 1.3.0; 1.3.1; 1.3.2; +34 more |
| CVE-2010-3694 | – | Nov 9 | Cross-site request forgery (CSRF) vulnerability in the Horde Application Framework before 3.3.9 allows remote attackers to hijack the authentication of unspecified victims for… Affected: through 3.3.8; 1.0.3; 1.1.1; 1.3.0; 1.3.1; 1.3.2; +34 more |
| CVE-2009-3237 | – | Sep 17 | Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware 1.1 before 1.1.6 and 1.2 before 1.2.4; and… Affected: 3.2; 3.2.1; 3.2.2; 3.2.3; 3.2.4; 3.3; +4 more |
| CVE-2007-1474 | – | Mar 16 | Argument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before Horde Application Framework 3.1.4 allows local users to delete arbitrary files… Affected: 3.0.0; 3.0.4; 3.1.3 |
| CVE-2007-1473 | – | Mar 16 | Cross-site scripting (XSS) vulnerability in framework/NLS/NLS.php in Horde Framework before 3.1.4 RC1, when the login page contains a language selection box, allows remote… Affected: 1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.4; 1.2.5; +31 more |
| CVE-2006-3549 | – | Jul 13 | services/go.php in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 does not properly restrict its image proxy capability, which allows remote attackers to… Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; +7 more |
| CVE-2005-4190 | – | Dec 13 | Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework before 3.0.8 allow remote authenticated users to inject arbitrary web script or HTML via… Affected: 1.0.0; 1.0.2; 1.0.2_1; 1.0.3; 1.0.3_2; 1.0.3_3; +34 more |
Showing 9