258611
|
- |
|
owncloud
|
owncloud
|
Open redirect vulnerability in the Login Page (index.php) in ownCloud before 5.0.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redir…
|
CWE-20
Improper Input Validation
|
CVE-2013-2044
|
2014-03-18 00:24 |
2014-03-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258612
|
- |
|
owncloud
|
owncloud
|
apps/calendar/ajax/events.php in ownCloud before 4.5.11 and 5.x before 5.0.6 does not properly check the ownership of a calendar, which allows remote authenticated users to download arbitrary calenda…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-2043
|
2014-03-18 00:22 |
2014-03-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258613
|
- |
|
owncloud
|
owncloud
|
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5.11, and 5.0.x before 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via …
|
CWE-79
Cross-site Scripting
|
CVE-2013-2042
|
2014-03-18 00:19 |
2014-03-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258614
|
- |
|
owncloud
|
owncloud
|
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 5.0.x before 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via the (1) tag parameter to apps/bookmarks/…
|
CWE-79
Cross-site Scripting
|
CVE-2013-2041
|
2014-03-18 00:17 |
2014-03-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258615
|
- |
|
owncloud
|
owncloud
|
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5.11, and 5.0.x before 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via …
|
CWE-79
Cross-site Scripting
|
CVE-2013-2040
|
2014-03-18 00:15 |
2014-03-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258616
|
- |
|
owncloud
|
owncloud
|
Directory traversal vulnerability in lib/files/view.php in ownCloud before 4.0.15, 4.5.x 4.5.11, and 5.x before 5.0.6 allows remote authenticated users to access arbitrary files via unspecified vecto…
|
CWE-22
Path Traversal
|
CVE-2013-2039
|
2014-03-18 00:14 |
2014-03-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258617
|
- |
|
owncloud
|
owncloud
|
The contacts application in ownCloud before 4.5.10 and 5.x before 5.0.5 does not properly check the ownership of contacts, which allows remote authenticated users to download arbitrary contacts via u…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-1963
|
2014-03-18 00:10 |
2014-03-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258618
|
- |
|
juniper
|
ive_os
|
Unspecified vulnerability in the Linux Network Connect client in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before…
|
NVD-CWE-noinfo
|
CVE-2014-2292
|
2014-03-17 22:57 |
2014-03-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258619
|
- |
|
canonical debian fedoraproject linuxfoundation
|
ubuntu_linux debian_linux fedora cups-filters
|
The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows local users to gain privileges via a Trojan horse driver in the same…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-6476
|
2014-03-17 22:10 |
2014-03-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258620
|
- |
|
pidgin
|
pidgin
|
The IRC protocol plugin in libpurple in Pidgin before 2.10.8 does not validate argument counts, which allows remote IRC servers to cause a denial of service (application crash) via a crafted message.
|
CWE-20
Improper Input Validation
|
CVE-2014-0020
|
2014-03-16 13:43 |
2014-02-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|