Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
moritz naumann vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2006-4624
CRLF injection vulnerability in Utils.py in Mailman prior to 2.1.9rc1 allows remote malicious users to spoof messages in the error log and possibly trick the administrator into visiting malicious URLs via CRLF sequences in the URI.
Gnu Mailman
NA
CVE-2007-1474
Argument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before Horde Application Framework 3.1.4 allows local users to delete arbitrary files and possibly gain privileges via multiple space-delimited pathnames.
Horde Horde Application Framework 3.0.4
Horde Horde Application Framework 3.1.3
Horde Imp 2.2.5
Horde Imp 2.2.6
Horde Imp 3.2.1
Horde Imp 3.2.2
Horde Imp 2.0
Horde Imp 2.2
Horde Imp 2.2.7
Horde Imp 2.2.8
Horde Imp 3.2.3
Horde Imp 3.2.4
Horde Horde Application Framework 3.0.0
Horde Imp 2.2.3
Horde Imp 2.2.4
Horde Imp 3.1.2
Horde Imp 3.2
Horde Imp 2.2.1
Horde Imp 2.2.2
Horde Imp 2.3
Horde Imp 3.0
Horde Imp 3.1
1 EDB exploit
NA
CVE-2007-1473
Cross-site scripting (XSS) vulnerability in framework/NLS/NLS.php in Horde Framework prior to 3.1.4 RC1, when the login page contains a language selection box, allows remote malicious users to inject arbitrary web script or HTML via the new_lang parameter to login.php.
Horde Horde Application Framework 1.2.5
Horde Horde Application Framework 1.2.6
Horde Horde Application Framework 1.2.7
Horde Horde Application Framework 2.2.1
Horde Horde Application Framework 2.2.3
Horde Horde Application Framework 3.0.0
Horde Horde Application Framework 3.0.1
Horde Horde Application Framework 3.0.8
Horde Horde Application Framework 3.0.9
Horde Horde Application Framework 1.2.0
Horde Horde Application Framework 1.2.8
Horde Horde Application Framework 1.3.3
Horde Horde Application Framework 2.2.4
Horde Horde Application Framework 2.2.5
Horde Horde Application Framework 3.0.10
Horde Horde Application Framework 3.0.2
Horde Horde Application Framework 3.1.0
Horde Horde Application Framework 3.1.1
Horde Horde Application Framework 1.2.3
Horde Horde Application Framework 1.2.4
Horde Horde Application Framework 2.1
Horde Horde Application Framework 2.2
1 EDB exploit
NA
CVE-2006-3636
Multiple cross-site scripting (XSS) vulnerabilities in Mailman prior to 2.1.9rc1 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Gnu Mailman 2.1.1
Gnu Mailman 2.1.7
Gnu Mailman 2.1.8
Gnu Mailman 2.1.2
Gnu Mailman 2.1.3
Gnu Mailman 2.1b1
Gnu Mailman 2.1
Gnu Mailman 2.1.5.8
Gnu Mailman 2.1.6
Gnu Mailman 2.1.4
Gnu Mailman 2.1.5
1 EDB exploit
NA
CVE-2006-3549
services/go.php in Horde Application Framework 3.0.0 up to and including 3.0.10 and 3.1.0 up to and including 3.1.1 does not properly restrict its image proxy capability, which allows remote malicious users to perform "Web tunneling" attacks and use the server as a prox...
Horde Horde Application Framework 3.0.4
Horde Horde Application Framework 3.0.5
Horde Horde Application Framework 3.0.0
Horde Horde Application Framework 3.0.6
Horde Horde Application Framework 3.0.7
Horde Horde Application Framework 3.0.1
Horde Horde Application Framework 3.0.10
Horde Horde Application Framework 3.0.8
Horde Horde Application Framework 3.0.9
Horde Horde Application Framework 3.0.2
Horde Horde Application Framework 3.0.3
Horde Horde Application Framework 3.1.0
Horde Horde Application Framework 3.1.1
NA
CVE-2006-4256
index.php in Horde Application Framework prior to 3.1.2 allows remote malicious users to include web pages from other sites, which could be useful for phishing attacks, via a URL in the url parameter, aka "cross-site referencing." NOTE: some sources have referred to thi...
Horde Application Framework 3.0
Horde Application Framework 3.0.1
Horde Application Framework 3.0.7
Horde Application Framework 3.0.8
Horde Application Framework 3.0.4 Rc2
Horde Application Framework 3.0.6
Horde Application Framework 3.0.4
Horde Application Framework 3.0.4 Rc1
Horde Application Framework 3.1.1
Horde Application Framework 3.0.2
Horde Application Framework 3.0.3
Horde Application Framework 3.0.9
Horde Application Framework 3.1
NA
CVE-2006-3548
Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.0.0 up to and including 3.0.10 and 3.1.0 up to and including 3.1.1 allow remote malicious users to inject arbitrary web script or HTML via a (1) javascript URI or an external (2) http, (3) https,...
Horde Horde 3.0.2
Horde Horde 3.0.3
Horde Horde 3.0.9
Horde Horde 3.1
Horde Horde 3.0.4
Horde Horde 3.0.4 Rc1
Horde Horde 3.1.1
Horde Horde 3.0.4 Rc2
Horde Horde 3.0.6
Horde Horde 3.0
Horde Horde 3.0.1
Horde Horde 3.0.7
Horde Horde 3.0.8
NA
CVE-2010-3695
Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP prior to 4.3.8, and Horde Groupware Webmail Edition prior to 1.2.7, allows remote malicious users to inject arbitrary web script or HTML via the fm_id parameter in a fetchmail_prefs_save action, related t...
Horde Imp 4.1.3
Horde Imp 4.0.4
Horde Imp 2.2.1
Horde Imp 4.1.5
Horde Imp 4.0.3
Horde Imp 2.2.5
Horde Imp 4.3.5
Horde Imp 4.2.2
Horde Imp 4.3
Horde Imp 4.3.2
Horde Imp 3.2.7
Horde Imp 3.2
Horde Imp 3.1.2
Horde Imp 3.2.2
Horde Imp 2.2.2
Horde Imp 2.0
Horde Imp 4.3.3
Horde Imp 3.2.4
Horde Imp 3.2.3
Horde Imp 2.2.8
Horde Imp 3.1
Horde Imp 4.0.2
1 EDB exploit
NA
CVE-2009-1575
Cross-site scripting (XSS) vulnerability in Drupal 5.x prior to 5.17 and 6.x prior to 6.11, as used in vbDrupal prior to 5.17.0, allows remote malicious users to inject arbitrary web script or HTML via crafted UTF-8 byte sequences before the Content-Type meta tag, which are treat...
Drupal Drupal 5.0
Drupal Drupal 5.1
Drupal Drupal 5.4
Drupal Drupal 5.5
Drupal Drupal 5.13
Drupal Drupal 5.14
Drupal Drupal 6.0
Drupal Drupal 6
Drupal Drupal 6.5
Drupal Drupal 5.1 Rev1.1
Drupal Drupal 5.2
Drupal Drupal 5.3
Drupal Drupal 5.9
Drupal Drupal 5.12
Drupal Drupal 6.1
Drupal Drupal 6.2
Drupal Drupal 6.10
Drupal Drupal 6.4
Drupal Drupal 5.7
Drupal Drupal 5.8
Drupal Drupal 6.6
Drupal Drupal 6.8
NA
CVE-2009-1576
Unspecified vulnerability in Drupal 5.x prior to 5.17 and 6.x prior to 6.11, as used in vbDrupal prior to 5.17.0, allows user-assisted remote malicious users to obtain sensitive information by tricking victims into visiting the front page of the site with a crafted URL and causin...
Drupal Drupal 5.0
Drupal Drupal 5.16
Drupal Drupal 6.0
Drupal Drupal 6.8
Drupal Drupal 6.10
Drupal Drupal 6.9
Drupal Drupal 5.11
Drupal Drupal 6.6
Drupal Drupal 6.2
Drupal Drupal 5.12
Drupal Drupal 5.10
Drupal Drupal 5.13
Drupal Drupal 6.1
Drupal Drupal 6.3
Drupal Drupal 6.7
Drupal Drupal 5.1 Rev1.1
Drupal Drupal 5.1
Drupal Drupal 5.15
Drupal Drupal 5.14
Drupal Drupal 6.5
Drupal Drupal 6.4
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypass
CVE-2024-30051
remote
CVE-2024-27954
CVE-2023-51483
CVE-2023-47782
SSRF
CVE-2024-24715
CVE-2023-52424
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »