Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
open-xchange ox guard open-xchange ox guard vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2015-5703
SQL injection vulnerability in the public key discovery API call in Open-Xchange OX Guard prior to 2.0.0-rev8 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Open-xchange Ox Guard Open-xchange Ox Guard
5.4
CVSSv3
CVE-2023-26456
Users were able to set an arbitrary "product name" for OX Guard. The chosen value was not sufficiently sanitized before processing it at the user interface, allowing for indirect cross-site scripting attacks. Accounts that were temporarily taken over could be configured...
Open-xchange Ox Guard
Open-xchange Ox Guard 2.10.7
6.1
CVSSv3
CVE-2016-6853
An issue exists in Open-Xchange OX Guard prior to 2.4.2-rev5. Script code and references to external websites can be injected to the names of PGP public keys. When requesting that key later on using a specific URL, such script code might get executed. In case of injecting externa...
Open-xchange Ox Guard
1 EDB exploit
7.5
CVSSv3
CVE-2020-28944
OX Guard 2.10.4 and previous versions allows a Denial of Service via a WKS server that responds slowly or with a large amount of data.
Open-xchange Ox Guard
NA
CVE-2015-7385
Cross-site scripting (XSS) vulnerability in Open-Xchange OX Guard prior to 2.0.0-rev11 allows remote malicious users to inject arbitrary web script or HTML via the uid field in a PGP public key, which is not properly handled in "Guard PGP Settings."
Open-xchange Ox Guard
6.1
CVSSv3
CVE-2016-6851
An issue exists in Open-Xchange OX Guard prior to 2.4.2-rev5. Script code can be provided as parameter to the OX Guard guest reader web application. This allows cross-site scripting attacks against arbitrary users since no prior authentication is needed. Malicious script code can...
Open-xchange Ox Guard
1 EDB exploit
6.1
CVSSv3
CVE-2016-6854
An issue exists in Open-Xchange OX Guard prior to 2.4.2-rev5. Script code which got injected to a mail with inline PGP signature gets executed when verifying the signature. Malicious script code can be executed within a user's context. This can lead to session hijacking or t...
Open-xchange Ox Guard
1 EDB exploit
8.8
CVSSv3
CVE-2015-8542
An issue exists in Open-Xchange Guard prior to 2.2.0-rev8. The "getprivkeybyid" API call is used to download a PGP Private Key for a specific user after providing authentication credentials. Clients provide the "id" and "cid" parameter to specify the...
Open-xchange Ox Guard
7.5
CVSSv3
CVE-2016-4028
An issue exists in Open-Xchange OX Guard prior to 2.4.0-rev8. OX Guard uses an authentication token to identify and transfer guest users' credentials. The OX Guard API acts as a padding oracle by responding with different error codes depending on whether the provided token m...
Open-xchange Ox Guard
8.8
CVSSv3
CVE-2018-10986
OX Guard 2.8.0 has CSRF.
Open-xchange Ox Guard 2.8.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
buffer overflow
type confusion
server-side request forgery
CVE-2024-38440
CVE-2024-27801
CVE-2024-5868
CVE-2024-0582
CVE-2024-37643
CVE-2024-3105
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »