NVD

Id
82909  
Name
CVE-2016-6191  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the View Raw Source page in the Web Calendar in SOGo before 3.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Description, (2) Location, (3) URL, or (4) Title field.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-02-28  
Published
2017-02-17  
Modified Date
2017-02-22  
Seq
2016-6191  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
407947 82909 CVE-2016-9560 [oss-security] 20161120 jasper: stack-based buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)  View
407948 82909 CVE-2016-9560 [oss-security] 20161122 Re: jasper: stack-based buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)  View
407949 82909 CVE-2016-9560 94428  View
407950 82909 CVE-2016-9560 https://blogs.gentoo.org/ago/2016/11/20/jasper-stack-based-buffer-overflow-in-jpc_tsfb_getbands2-jpc_tsfb-c/  View
407951 82909 CVE-2016-9560 https://github.com/mdadams/jasper/commit/1abc2e5a401a4bf1d5ca4df91358ce5df111f495  View

Related JVN