Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
novell groupwise 8.0 vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2009-0274
Unspecified vulnerability in WebAccess in Novell GroupWise 6.5, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 might allow remote malicious users to obtain sensitive information via a crafted URL, related to conversion of POST requests to GET requests.
Novell Groupwise 7.03
Novell Groupwise 8.0
Novell Groupwise 7.0
Novell Groupwise 7.02x
Novell Groupwise 6.5
Novell Groupwise 7.01
9.3
CVSSv2
CVE-2012-0439
An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 prior to 8.0.3 HP2 and 2012 before SP1 HP1 allows remote malicious users to execute arbitrary code via (1) a pointer argument to the SetEngine method or (2) an XPItem pointer argument to an unspecified method.
Novell Groupwise 8.00
Novell Groupwise 8.0
Novell Groupwise 8.02
Novell Groupwise 8.03
Novell Groupwise 8.01
Novell Groupwise 2012
1 EDB exploit
7.5
CVSSv2
CVE-2009-1634
The WebAccess component in Novell GroupWise 7.x prior to 7.03 HP3 and 8.x prior to 8.0 HP2 does not properly implement session management mechanisms, which allows remote malicious users to gain access to user accounts via unspecified vectors.
Novell Groupwise 7.0
Novell Groupwise 7.0.3
Novell Groupwise 7.03
Novell Groupwise 8.0
Novell Groupwise 7.0.0
Novell Groupwise 7.0.2
1 EDB exploit
10
CVSSv2
CVE-2013-0804
The client in Novell GroupWise 8.0 prior to 8.0.3 HP2 and 2012 before SP1 HP1 allows remote malicious users to execute arbitrary code or cause a denial of service (incorrect pointer dereference) via unspecified vectors.
Novell Groupwise 8.00
Novell Groupwise 8.0
Novell Groupwise 8.01
Novell Groupwise 8.02
Novell Groupwise 8.03
Novell Groupwise 2012
1 EDB exploit
10
CVSSv2
CVE-2009-1636
Multiple buffer overflows in the Internet Agent (aka GWIA) component in Novell GroupWise 7.x prior to 7.03 HP3 and 8.x prior to 8.0 HP2 allow remote malicious users to execute arbitrary code via (1) a crafted e-mail address in an SMTP session or (2) an SMTP command.
Novell Groupwise 7.0
Novell Groupwise 7.0.2
Novell Groupwise 7.03
Novell Groupwise 7.01
Novell Groupwise 7.0.0
Novell Groupwise 7.0.3
Novell Groupwise 8.0
4.3
CVSSv2
CVE-2009-4662
Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 7.0 prior to 7.03 HP4 and 8.0 prior to 8.0 SP1 allows remote malicious users to inject arbitrary web script or HTML via the User.Theme.index parameter.
Novell Groupwise 7.0
Novell Groupwise 7.03
Novell Groupwise 7.01
Novell Groupwise 8.0
4.3
CVSSv2
CVE-2009-1635
Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess component in Novell GroupWise 7.x prior to 7.03 HP3 and 8.x prior to 8.0 HP2 allow remote malicious users to inject arbitrary web script or HTML via (1) the User.lang parameter to the login page (aka gw/webacc),...
Novell Groupwise 7.0
Novell Groupwise 8.0
Novell Groupwise 7.01
Novell Groupwise 7.0.2
Novell Groupwise 7.0.3
Novell Groupwise 7.03
Novell Groupwise 7.0.0
Novell Groupwise 7.02x
7.5
CVSSv2
CVE-2011-4189
The client in Novell GroupWise 8.0x up to and including 8.02HP3 allows remote malicious users to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via a long e-mail address in an Address Book (aka .NAB) file.
Novell Groupwise 8.0
Novell Groupwise 8.0.2
Novell Groupwise 8.0.1
1 EDB exploit
4.3
CVSSv2
CVE-2013-1087
Cross-site scripting (XSS) vulnerability in the client in Novell GroupWise up to and including 8.0.3 HP3, and 2012 through SP2, on Windows allows user-assisted remote malicious users to inject arbitrary web script or HTML via the body of an e-mail message.
Novell Groupwise 8.03
Novell Groupwise 8.0
Novell Groupwise 8.01
Novell Groupwise 7.02
Novell Groupwise 7.03
Novell Groupwise 7.0.4
Novell Groupwise 6.5.3
Novell Groupwise 6.5.4
Novell Groupwise 6.5.7
Novell Groupwise 6.5
Novell Groupwise 8.02
Novell Groupwise 8.00
Novell Groupwise 7.01
Novell Groupwise 2012
Novell Groupwise
Novell Groupwise 7.0
Novell Groupwise 7.0.3
Novell Groupwise 6.5.6
Novell Groupwise 6.5.2
4.3
CVSSv2
CVE-2013-1086
Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise prior to 8.0.3 HP3, and 2012 before SP2, allows remote malicious users to inject arbitrary web script or HTML via vectors involving an onError attribute.
Novell Groupwise 2012
Novell Groupwise 8.03
Novell Groupwise 8.00
Novell Groupwise 8.02
Novell Groupwise 7.0
Novell Groupwise 7.0.4
Novell Groupwise 7.0.3
Novell Groupwise 7.02
Novell Groupwise 6.5
Novell Groupwise 7.03
Novell Groupwise 7.01
Novell Groupwise 5.57e
Novell Groupwise 5.5
Novell Groupwise 5.2
Novell Groupwise 8.0
Novell Groupwise 8.01
Novell Groupwise 6.5.6
Novell Groupwise 6.5.3
Novell Groupwise 6.5.4
Novell Groupwise 6.5.7
Novell Groupwise 6.0.1
Novell Groupwise
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
denial of service
CVE-2024-27371
CVE-2024-20405
CVE-2024-31627
CVE-2024-31625
race condition
CVE-2024-4358
cross-site scripting
CVE-2023-20938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
NEXT »