258291
|
- |
|
owncloud
|
owncloud
|
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5.11, and 5.0.x before 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via …
|
CWE-79
Cross-site Scripting
|
CVE-2013-2042
|
2014-03-18 00:19 |
2014-03-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258292
|
- |
|
owncloud
|
owncloud
|
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 5.0.x before 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via the (1) tag parameter to apps/bookmarks/…
|
CWE-79
Cross-site Scripting
|
CVE-2013-2041
|
2014-03-18 00:17 |
2014-03-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258293
|
- |
|
owncloud
|
owncloud
|
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5.11, and 5.0.x before 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via …
|
CWE-79
Cross-site Scripting
|
CVE-2013-2040
|
2014-03-18 00:15 |
2014-03-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258294
|
- |
|
owncloud
|
owncloud
|
Directory traversal vulnerability in lib/files/view.php in ownCloud before 4.0.15, 4.5.x 4.5.11, and 5.x before 5.0.6 allows remote authenticated users to access arbitrary files via unspecified vecto…
|
CWE-22
Path Traversal
|
CVE-2013-2039
|
2014-03-18 00:14 |
2014-03-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258295
|
- |
|
owncloud
|
owncloud
|
The contacts application in ownCloud before 4.5.10 and 5.x before 5.0.5 does not properly check the ownership of contacts, which allows remote authenticated users to download arbitrary contacts via u…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-1963
|
2014-03-18 00:10 |
2014-03-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258296
|
- |
|
juniper
|
ive_os
|
Unspecified vulnerability in the Linux Network Connect client in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before…
|
NVD-CWE-noinfo
|
CVE-2014-2292
|
2014-03-17 22:57 |
2014-03-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258297
|
- |
|
canonical debian fedoraproject linuxfoundation
|
ubuntu_linux debian_linux fedora cups-filters
|
The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows local users to gain privileges via a Trojan horse driver in the same…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-6476
|
2014-03-17 22:10 |
2014-03-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258298
|
- |
|
pidgin
|
pidgin
|
The IRC protocol plugin in libpurple in Pidgin before 2.10.8 does not validate argument counts, which allows remote IRC servers to cause a denial of service (application crash) via a crafted message.
|
CWE-20
Improper Input Validation
|
CVE-2014-0020
|
2014-03-16 13:43 |
2014-02-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258299
|
- |
|
pidgin
|
pidgin
|
Multiple integer signedness errors in libpurple in Pidgin before 2.10.8 allow remote attackers to cause a denial of service (application crash) via a crafted timestamp value in an XMPP message.
|
CWE-189
Numeric Errors
|
CVE-2013-6477
|
2014-03-16 13:42 |
2014-02-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258300
|
- |
|
pidgin
|
pidgin
|
gtkimhtml.c in Pidgin before 2.10.8 does not properly interact with underlying library support for wide Pango layouts, which allows user-assisted remote attackers to cause a denial of service (applic…
|
CWE-20
Improper Input Validation
|
CVE-2013-6478
|
2014-03-16 13:42 |
2014-02-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|