CVE-2014-9905

Mô tả

Tham khảo

• openwall.com/lists/oss-security/2016/07/09/3 · Mailing List
• inverse-inc/sogo commit 1a7fc2a · Patch
• inverse-inc/sogo commit 3a5e44e · Patch
• inverse-inc/sogo commit 80a0940 · Patch
• inverse-inc/sogo commit c94595e · Patch
• sogo.nu/bugs/view.php · Vendor Advisory

Lỗ hổng khác của sogo

• CVE-2026-33550THẤP 2.6SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length (only 12 digits instead of the 20 recomm…
• CVE-2025-71276TRUNG BÌNH 6.1SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories.
• CVE-2026-3054TRUNG BÌNH 6.1A vulnerability was identified in Alinto SOGo 5.12.3/5.12.4. This impacts an unknown function. The manipulation of the argument hint leads t…
• CVE-2025-63499TRUNG BÌNH 6.1Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the theme parameter.
• CVE-2025-63498TRUNG BÌNH 6.1alinto SOGo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the "userName" parameter.