Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
horde vulnerabilities and exploits
(subscribe to this query)
4.9
CVSSv2
CVE-2008-0807
lib/Driver/sql.php in Turba 2 (turba2) Contact Manager H3 2.1.x prior to 2.1.7 and 2.2.x prior to 2.2-RC3, as used in products such as Horde Groupware prior to 1.0.4 and Horde Groupware Webmail Edition prior to 1.0.5, does not properly check access rights, which allows remote aut...
Horde Groupware 1.0.3
Horde Groupware Webmail Edition 1.0.4
Horde Turba Contact Manager 2.1.6
4.3
CVSSv2
CVE-2005-1318
Cross-site scripting (XSS) vulnerability in Horde Forwards E-Mail Forwarding Manager prior to 2.2.2 allows remote malicious users to inject arbitrary web script or HTML via the parent's frame page title.
Horde Forwards 2.2
Horde Forwards 2.1
Horde Forwards 2.2.1
10
CVSSv2
CVE-2005-3344
The default installation of Horde 3.0.4 contains an administrative account with a blank password, which allows remote malicious users to gain access.
Horde Horde 3.0.4
6.8
CVSSv2
CVE-2014-3999
The Horde_Ldap library prior to 2.0.6 for Horde allows remote malicious users to bypass authentication by leveraging knowledge of the LDAP bind user DN.
Horde Horde Ldap
4.6
CVSSv2
CVE-2000-0910
Horde library 1.02 allows malicious users to execute arbitrary commands via shell metacharacters in the "from" address.
Horde Horde 1.2
4.3
CVSSv2
CVE-2005-0378
Multiple cross-site scripting (XSS) vulnerabilities in Horde 3.0 allow remote malicious users to inject arbitrary web script or HTML via the (1) group parameter to prefs.php or (2) url parameter to index.php.
Horde Horde 3.0
4
CVSSv2
CVE-2020-8866
This vulnerability allows remote malicious users to create arbitrary files on affected installations of Horde Groupware Webmail Edition 5.2.22. Authentication is required to exploit this vulnerability. The specific flaw exists within add.php. The issue results from the lack of pr...
Horde Groupware 5.2.22
Horde Horde Form
Debian Debian Linux 8.0
2 EDB exploits
6.8
CVSSv2
CVE-2015-7984
Multiple cross-site request forgery (CSRF) vulnerabilities in Horde prior to 5.2.8, Horde Groupware prior to 5.2.11, and Horde Groupware Webmail Edition prior to 5.2.11 allow remote malicious users to hijack the authentication of administrators for requests that execute arbitrary...
Horde Groupware
Horde Horde Application Framework
Debian Debian Linux 8.0
1 EDB exploit
4.3
CVSSv2
CVE-2020-8034
Gollem prior to 3.0.13, as used in Horde Groupware Webmail Edition 5.2.22 and other products, is affected by a reflected Cross-Site Scripting (XSS) vulnerability via the HTTP GET dir parameter in the browser functionality, affecting breadcrumb output. An attacker can obtain acces...
Horde Gollem
Horde Groupware 5.2.22
4.3
CVSSv2
CVE-2005-1316
Cross-site scripting (XSS) vulnerability in Horde Accounts module prior to 2.1.2 allows remote malicious users to inject arbitrary web script or HTML via the parent's frame page title.
Horde Accounts 2.1.1
Horde Accounts 2.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereference
CVE-2023-52689
CVE-2024-23803
client side
CVE-2023-52696
information disclosure
CVE-2024-35843
CVE-2024-27130
CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
3
4
5
6
7
8
9
10
NEXT »