Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for horde_imp by debian

    CVE-2009-0930 (GCVE-0-2009-0930)

    Vulnerability from nvd – Published: 2009-03-17 21:00 – Updated: 2024-08-07 04:57
    VLAI
    Summary
    Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 4.2.2 and 4.3.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) smime.php, (2) pgp.php, and (3) message.php.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 29/100 over 2146 records in the last 180 days details
    References
    URL Tags
    http://lists.opensuse.org/opensuse-security-annou… vendor-advisoryx_refsource_SUSE
    http://secunia.com/advisories/33719 third-party-advisoryx_refsource_SECUNIA
    http://www.debian.org/security/2009/dsa-1770 vendor-advisoryx_refsource_DEBIAN
    http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.… x_refsource_CONFIRM
    http://secunia.com/advisories/34418 third-party-advisoryx_refsource_SECUNIA
    http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.… x_refsource_CONFIRM
    http://lists.horde.org/archives/announce/2009/000… mailing-listx_refsource_MLIST
    http://secunia.com/advisories/34703 third-party-advisoryx_refsource_SECUNIA
    http://lists.horde.org/archives/announce/2009/000… mailing-listx_refsource_MLIST
    http://www.securityfocus.com/bid/33492 vdb-entryx_refsource_BID
    Date Public
    2009-01-27 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:57:16.427Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SR:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html"
          },
          {
            "name": "33719",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33719"
          },
          {
            "name": "DSA-1770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1770"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.375"
          },
          {
            "name": "34418",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34418"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.301.2.3"
          },
          {
            "name": "[announce] 20090127 IMP 4.2.2 (final)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.horde.org/archives/announce/2009/000484.html"
          },
          {
            "name": "34703",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34703"
          },
          {
            "name": "[announce] 20090127 IMP 4.3.3 (final)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.horde.org/archives/announce/2009/000485.html"
          },
          {
            "name": "33492",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/33492"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-01-27T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 4.2.2 and 4.3.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) smime.php, (2) pgp.php, and (3) message.php."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2009-04-01T09:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SUSE-SR:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html"
        },
        {
          "name": "33719",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33719"
        },
        {
          "name": "DSA-1770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1770"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.375"
        },
        {
          "name": "34418",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34418"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.301.2.3"
        },
        {
          "name": "[announce] 20090127 IMP 4.2.2 (final)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.horde.org/archives/announce/2009/000484.html"
        },
        {
          "name": "34703",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34703"
        },
        {
          "name": "[announce] 20090127 IMP 4.3.3 (final)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.horde.org/archives/announce/2009/000485.html"
        },
        {
          "name": "33492",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/33492"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-0930",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 4.2.2 and 4.3.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) smime.php, (2) pgp.php, and (3) message.php."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SR:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html"
            },
            {
              "name": "33719",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33719"
            },
            {
              "name": "DSA-1770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2009/dsa-1770"
            },
            {
              "name": "http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.375",
              "refsource": "CONFIRM",
              "url": "http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.375"
            },
            {
              "name": "34418",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34418"
            },
            {
              "name": "http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.301.2.3",
              "refsource": "CONFIRM",
              "url": "http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.301.2.3"
            },
            {
              "name": "[announce] 20090127 IMP 4.2.2 (final)",
              "refsource": "MLIST",
              "url": "http://lists.horde.org/archives/announce/2009/000484.html"
            },
            {
              "name": "34703",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34703"
            },
            {
              "name": "[announce] 20090127 IMP 4.3.3 (final)",
              "refsource": "MLIST",
              "url": "http://lists.horde.org/archives/announce/2009/000485.html"
            },
            {
              "name": "33492",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/33492"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-0930",
    "datePublished": "2009-03-17T21:00:00.000Z",
    "dateReserved": "2009-03-17T00:00:00.000Z",
    "dateUpdated": "2024-08-07T04:57:16.427Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2009-0930 (GCVE-0-2009-0930)

    Vulnerability from cvelistv5 – Published: 2009-03-17 21:00 – Updated: 2024-08-07 04:57
    VLAI
    Summary
    Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 4.2.2 and 4.3.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) smime.php, (2) pgp.php, and (3) message.php.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 29/100 over 2146 records in the last 180 days details
    References
    URL Tags
    http://lists.opensuse.org/opensuse-security-annou… vendor-advisoryx_refsource_SUSE
    http://secunia.com/advisories/33719 third-party-advisoryx_refsource_SECUNIA
    http://www.debian.org/security/2009/dsa-1770 vendor-advisoryx_refsource_DEBIAN
    http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.… x_refsource_CONFIRM
    http://secunia.com/advisories/34418 third-party-advisoryx_refsource_SECUNIA
    http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.… x_refsource_CONFIRM
    http://lists.horde.org/archives/announce/2009/000… mailing-listx_refsource_MLIST
    http://secunia.com/advisories/34703 third-party-advisoryx_refsource_SECUNIA
    http://lists.horde.org/archives/announce/2009/000… mailing-listx_refsource_MLIST
    http://www.securityfocus.com/bid/33492 vdb-entryx_refsource_BID
    Date Public
    2009-01-27 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:57:16.427Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SR:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html"
          },
          {
            "name": "33719",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33719"
          },
          {
            "name": "DSA-1770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1770"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.375"
          },
          {
            "name": "34418",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34418"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.301.2.3"
          },
          {
            "name": "[announce] 20090127 IMP 4.2.2 (final)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.horde.org/archives/announce/2009/000484.html"
          },
          {
            "name": "34703",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34703"
          },
          {
            "name": "[announce] 20090127 IMP 4.3.3 (final)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.horde.org/archives/announce/2009/000485.html"
          },
          {
            "name": "33492",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/33492"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-01-27T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 4.2.2 and 4.3.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) smime.php, (2) pgp.php, and (3) message.php."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2009-04-01T09:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SUSE-SR:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html"
        },
        {
          "name": "33719",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33719"
        },
        {
          "name": "DSA-1770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1770"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.375"
        },
        {
          "name": "34418",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34418"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.301.2.3"
        },
        {
          "name": "[announce] 20090127 IMP 4.2.2 (final)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.horde.org/archives/announce/2009/000484.html"
        },
        {
          "name": "34703",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34703"
        },
        {
          "name": "[announce] 20090127 IMP 4.3.3 (final)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.horde.org/archives/announce/2009/000485.html"
        },
        {
          "name": "33492",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/33492"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-0930",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 4.2.2 and 4.3.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) smime.php, (2) pgp.php, and (3) message.php."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SR:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html"
            },
            {
              "name": "33719",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33719"
            },
            {
              "name": "DSA-1770",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2009/dsa-1770"
            },
            {
              "name": "http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.375",
              "refsource": "CONFIRM",
              "url": "http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.375"
            },
            {
              "name": "34418",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34418"
            },
            {
              "name": "http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.301.2.3",
              "refsource": "CONFIRM",
              "url": "http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.301.2.3"
            },
            {
              "name": "[announce] 20090127 IMP 4.2.2 (final)",
              "refsource": "MLIST",
              "url": "http://lists.horde.org/archives/announce/2009/000484.html"
            },
            {
              "name": "34703",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34703"
            },
            {
              "name": "[announce] 20090127 IMP 4.3.3 (final)",
              "refsource": "MLIST",
              "url": "http://lists.horde.org/archives/announce/2009/000485.html"
            },
            {
              "name": "33492",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/33492"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-0930",
    "datePublished": "2009-03-17T21:00:00.000Z",
    "dateReserved": "2009-03-17T00:00:00.000Z",
    "dateUpdated": "2024-08-07T04:57:16.427Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}