CVSS: 4.9EPSS: 0%CPEs: 18EXPL: 0CVE-2014-2585
https://notcve.org/view.php?id=CVE-2014-2585
ownCloud before 5.0.15 and 6.x before 6.0.2, when the file_external app is enabled, allows remote authenticated users to mount the local filesystem in the user's ownCloud via the mount configuration. ownCloud anterior a 5.0.15 y 6.x anterior a 6.0.2, cuando la aplicación file_external está habilitada, permite a usuarios remotos autenticados montar el sistema de archivos local en el ownCloud del usuario a través de la configuración mount. • http://owncloud.org/about/security/advisories/oC-SA-2014-008 • CWE-20: Improper Input Validation •
CVSS: 6.5EPSS: 0%CPEs: 22EXPL: 0CVE-2013-7344
https://notcve.org/view.php?id=CVE-2013-7344
Unspecified vulnerability in core/settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via unknown vectors. NOTE: this issue was SPLIT from CVE-2013-0303 due to different affected versions. Vulnerabilidad no especificada en core/settings.php en ownCloud anterior a 4.0.12 y 4.5.x anterior a 4.5.6 permite a usuarios remotos autenticados ejecutar código PHP arbitrario a través de vectores desconocidos. NOTA: este problema fue separado de CVE-2013-0303 debido a diferentes versiones afectadas. • http://owncloud.org/about/security/advisories/oC-SA-2013-006 •
CVSS: 4.3EPSS: 0%CPEs: 53EXPL: 0CVE-2014-2057
https://notcve.org/view.php?id=CVE-2014-2057
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 6.0.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Múltiples vulnerabilidades de XSS en ownCloud anterior a 6.0.2 permiten a atacantes remotos inyectar script Web o HTML arbitrarios a través de vectores no especificados. • http://owncloud.org/about/security/advisories/oC-SA-2014-007 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.5EPSS: 0%CPEs: 18EXPL: 0CVE-2013-0303
https://notcve.org/view.php?id=CVE-2013-0303
Unspecified vulnerability in core/ajax/translations.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via unknown vectors. NOTE: this entry has been SPLIT due to different affected versions. The core/settings.php issue is covered by CVE-2013-7344. Vulnerabilidad no especificada en core/ajax/translations.php en ownCloud anterior a 4.0.12 y 4.5.x anterior a 4.5.6 permite a usuarios remotos autenticados ejecutar código PHP arbitrario a través de vectores desconocidos. NOTA: esta entrada ha sido dividida (SPLIT) debido a diferentes versiones afectadas. • http://owncloud.org/about/security/advisories/oC-SA-2013-006 •
CVSS: 4.3EPSS: 0%CPEs: 12EXPL: 2CVE-2013-0201
https://notcve.org/view.php?id=CVE-2013-0201
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) QUERY_STRING to core/lostpassword/templates/resetpassword.php, (2) mime parameter to apps/files/ajax/mimeicon.php, or (3) token parameter to apps/gallery/sharing.php. Múltiples vulnerabilidades de XSS en ownCloud 4.5.5, 4.0.10 y versiones anteriores permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarias a través de la (1) QUERY_STRING a core/lostpassword/templates/resetpassword.php, (2) parámetro mime a apps/files/ajax/mimeicon.php o (3) parámetro token a apps/gallery/sharing.php • http://osvdb.org/89505 http://osvdb.org/89506 http://osvdb.org/89511 http://owncloud.org/about/security/advisories/oC-SA-2013-001 https://exchange.xforce.ibmcloud.com/vulnerabilities/81475 https://github.com/owncloud/core/commit/4e2b834 https://github.com/owncloud/core/commit/b8e0309 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •