Known Vulnerabilities for Content by Horde
Listed below are 10 of the newest known vulnerabilities associated with "Content" by "Horde".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-128091 json | When MCUboot is built with the TinyCrypt crypto backend (MCUBOOT_USE_TINYCRYPT), bootutil_aes_ctr_drop() in boot/bootutil/inc... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-128052 json | OpenMage magento-lts before 20.19.0 and 21.0.0-beta1 before 21.0.0-beta3 contains an incorrect authorization vulnerability in... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-128041 json | OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 serves RSS feeds with a text/html content type and d... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-127928 json | In MCUboot's serial-recovery encrypted-image support (boot/boot_serial/src/boot_serial_encryption.c), decrypt_image_inplace()... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-127209 json | Xiaomi Mi Browser Android Application (com.mi.globalbrowser) before 14.66.0-gn contains a path traversal vulnerability in the... | Not Provided | 2026-11-12 | 2026-11-13 |
| CVE-2026-127203 json | AppFlowy Cloud through 0.9.64 contains a stored cross-site scripting vulnerability that allows authenticated workspace member... | Not Provided | 2026-11-12 | 2026-11-12 |
| CVE-2026-127145 json | SOGo before 5.12.13 contains a server-side request forgery vulnerability that allows authenticated users to make the server c... | Not Provided | 2026-11-12 | 2026-11-13 |
| CVE-2026-127084 json | Teable before 2026-10-12T12-45-53Z.3331 contains a stored cross-site scripting vulnerability that allows authenticated users ... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-126955 json | Glance from 0.8.0 before 0.8.8 contains an observable response discrepancy in handlePageRequest and handlePageContentRequest ... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-126954 json | Glance from 0.7.9 before 0.8.8 contains a stored cross-site scripting vulnerability that allows malicious extension endpoints... | Not Provided | 2026-11-13 | 2026-11-13 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Horde | Content | 2.0.6 | |||
| Application | Horde | Content | 2.0.5 | |||
| Application | Horde | Content | 2.0.4 | |||
| Application | Horde | Content | 2.0.3 | |||
| Application | Horde | Content | 2.0.2 | |||
| Application | Horde | Content | 2.0.1 | |||
| Application | Horde | Content | 2.0.0 | |||
| Application | Horde | Content | 2.0.0 | |||
| Application | Horde | Content | 1.0.3 | |||
| Application | Horde | Content | 1.0.2 | |||
| Application | Horde | Content | 1.0.1 | |||
| Application | Horde | Content | 1.0.0 | |||
| Application | Horde | Content | 1.0.0 | |||
| Application | Horde | Content | 1.0.0 | |||
| Application | Horde | Content | 1.0.0 | |||
| Application | Horde | Content | 1.0.0 |