Page 7 of 131 results (0.004 seconds)

CVSS: 7.5EPSS: 0%CPEs: 13EXPL: 0

CVE-2013-0302

https://notcve.org/view.php?id=CVE-2013-0302

05 Jun 2014 — Unspecified vulnerability in ownCloud Server before 4.0.12 allows remote attackers to obtain sensitive information via unspecified vectors related to "inclusion of the Amazon SDK testing suite." NOTE: due to lack of details, it is not clear whether the issue exists in ownCloud itself, or in Amazon SDK. Vulnerabilidad no especificada en ownCloud Server anterior a 4.0.12 permite a atacantes remotos obtener información sensible a través de vectores no especificados relacionados con 'inclusión del suite de prue... • http://owncloud.org/about/security/advisories/oC-SA-2013-005 •

CVSS: 8.0EPSS: 0%CPEs: 7EXPL: 0

CVE-2013-0304

https://notcve.org/view.php?id=CVE-2013-0304

05 Jun 2014 — ownCloud Server before 4.5.7 does not properly check ownership of calendars, which allows remote authenticated users to read arbitrary calendars via the calid parameter to /apps/calendar/export.php. NOTE: this issue has been reported as a cross-site request forgery (CSRF) vulnerability, but due to lack of details, it is uncertain what the root cause is. ownCloud Server anterior a 4.5.7 no comprueba debidamente la propiedad de calendarios, lo que permite a usuarios remotos autenticados leer archivos calendar... • http://owncloud.org/about/security/advisories/oC-SA-2013-007 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 9.8EPSS: 0%CPEs: 18EXPL: 0

CVE-2014-2051

https://notcve.org/view.php?id=CVE-2014-2051

05 Jun 2014 — ownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote attackers to conduct an LDAP injection attack via unspecified vectors, as demonstrated using a "login query." ownCloud Server anterior a 5.0.15 y 6.0.x anterior a 6.0.2 permite a atacantes remotos realizar un ataque de inyección LDAP a través de vectores no especificados, tal y como fue demostrado utilizando una 'consulta de inicio de sesión.' • http://owncloud.org/about/security/advisories/oC-SA-2014-005 • CWE-94: Improper Control of Generation of Code ('Code Injection') •

CVSS: 6.1EPSS: 0%CPEs: 20EXPL: 0

CVE-2014-3833

https://notcve.org/view.php?id=CVE-2014-3833

04 Jun 2014 — Multiple cross-site scripting (XSS) vulnerabilities in the (1) Gallery and (2) core components in ownCloud Server before 5.016 and 6.0.x before 6.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the print_unescaped function. Múltiples vulnerabilidades de XSS en los componentes (1) Gallery y (2) Core en ownCloud Server anterior a 5.016 y 6.0.x anterior a 6.0.3 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a tr... • http://owncloud.org/about/security/advisories/oc-sa-2014-010 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0

CVE-2014-3834

https://notcve.org/view.php?id=CVE-2014-3834

04 Jun 2014 — ownCloud Server before 6.0.3 does not properly check permissions, which allows remote authenticated users to (1) access the contacts of other users via the address book or (2) rename files via unspecified vectors. ownCloud Server anterior a 6.0.3 no comprueba debidamente permisos, lo que permite a usuarios remotos autenticados (1) acceder a los contactos de otros usuarios a través del libro de direcciones o (2) renombrar archivos a través de vectores no especificados. • http://owncloud.org/about/security/advisories/oc-sa-2014-011 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 6.5EPSS: 0%CPEs: 20EXPL: 0

CVE-2014-3835

https://notcve.org/view.php?id=CVE-2014-3835

04 Jun 2014 — ownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not check permissions to the files_external application, which allows remote authenticated users to add external storage via unspecified vectors. ownCloud Server anterior a 5.0.16 y 6.0.x anterior a 6.0.3 no comprueba permisos a la aplicación files_external, lo que permite a usuarios remotos autenticados añadir almacenaje externo a través de vectores no especificados. • http://owncloud.org/about/security/advisories/oc-sa-2014-012 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 8.2EPSS: 0%CPEs: 3EXPL: 0

CVE-2014-3836

https://notcve.org/view.php?id=CVE-2014-3836

04 Jun 2014 — Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud Server before 6.0.3 allow remote attackers to hijack the authentication of users for requests that (1) conduct cross-site scripting (XSS) attacks, (2) modify files, or (3) rename files via unspecified vectors. Múltiples vulnerabilidades de CSRF en ownCloud Server anterior a 6.0.3 permiten a atacantes remotos secuestrar la autenticación de usuarios para solicitudes que (1) realizan ataques de XSS, (2) modifican archivos o (3) renombran ar... • http://owncloud.org/about/security/advisories/oc-sa-2014-014 • CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 4.3EPSS: 0%CPEs: 3EXPL: 0

CVE-2014-3837

https://notcve.org/view.php?id=CVE-2014-3837

04 Jun 2014 — The document application in ownCloud Server before 6.0.3 uses sequential values for the file_id, which allows remote authenticated users to enumerate shared files via unspecified vectors. La aplicación Document en ownCloud Server anterior a 6.0.3 utiliza valores secuenciales para file_id, lo que permite a usuarios remotos autenticados enumerar archivos compartidos a través de vectores no especificados. • http://owncloud.org/about/security/advisories/oc-sa-2014-015 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 4.3EPSS: 0%CPEs: 20EXPL: 0

CVE-2014-3838

https://notcve.org/view.php?id=CVE-2014-3838

04 Jun 2014 — ownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not properly check permissions, which allows remote authenticated users to read the names of files of other users by leveraging access to multiple accounts. ownCloud Server anterior a 5.0.16 y 6.0.x anterior a 6.0.3 no comprueba debidamente permisos, lo que permite a usuarios remotos autenticados leer los nombres de archivos de otros usuarios mediante el aprovechamiento de acceso a múltiples cuentas. • http://owncloud.org/about/security/advisories/oc-sa-2014-016 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2014-3963

https://notcve.org/view.php?id=CVE-2014-3963

04 Jun 2014 — ownCloud Server before 6.0.1 does not properly check permissions, which allows remote authenticated users to access arbitrary preview pictures via unspecified vectors. ownCloud Server anterior a 6.0.1 no comprueba debidamente permisos, lo que permite a usuarios remotos autenticados acceder a vistas preliminares de imágenes a través de vectores no especificados. • http://owncloud.org/about/security/advisories/oC-SA-2014-009 • CWE-264: Permissions, Privileges, and Access Controls •