|
281331
|
- |
|
gnu redhat debian suse f5
|
gnutls libtasn1 enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation debian_linux enterprise_linux_server_aus enterprise_linux_server_tus enterprise_l…
|
The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to cause out-of-bounds ac…
|
CWE-131
Incorrect Calculation of Buffer Size
|
CVE-2014-3468
|
2024-11-21 11:08 |
2014-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281332
|
- |
|
owncloud
|
owncloud
|
ownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not properly check permissions, which allows remote authenticated users to read the names of files of other users by leveraging access to mul…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-3838
|
2024-11-21 11:08 |
2014-06-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281333
|
- |
|
owncloud
|
owncloud
|
The document application in ownCloud Server before 6.0.3 uses sequential values for the file_id, which allows remote authenticated users to enumerate shared files via unspecified vectors.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-3837
|
2024-11-21 11:08 |
2014-06-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281334
|
- |
|
owncloud
|
owncloud
|
Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud Server before 6.0.3 allow remote attackers to hijack the authentication of users for requests that (1) conduct cross-site script…
|
CWE-352
Origin Validation Error
|
CVE-2014-3836
|
2024-11-21 11:08 |
2014-06-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281335
|
- |
|
owncloud
|
owncloud
|
ownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not check permissions to the files_external application, which allows remote authenticated users to add external storage via unspecified vect…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-3835
|
2024-11-21 11:08 |
2014-06-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281336
|
- |
|
owncloud
|
owncloud
|
ownCloud Server before 6.0.3 does not properly check permissions, which allows remote authenticated users to (1) access the contacts of other users via the address book or (2) rename files via unspec…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-3834
|
2024-11-21 11:08 |
2014-06-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281337
|
- |
|
owncloud
|
owncloud
|
Multiple cross-site scripting (XSS) vulnerabilities in the (1) Gallery and (2) core components in ownCloud Server before 5.016 and 6.0.x before 6.0.3 allow remote attackers to inject arbitrary web sc…
|
CWE-79
Cross-site Scripting
|
CVE-2014-3833
|
2024-11-21 11:08 |
2014-06-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281338
|
- |
|
owncloud
|
owncloud
|
Cross-site scripting (XSS) vulnerability in the Documents component in ownCloud Server 6.0.x before 6.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possi…
|
CWE-79
Cross-site Scripting
|
CVE-2014-3832
|
2024-11-21 11:08 |
2014-06-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281339
|
- |
|
lucidcrew
|
pixie
|
Multiple cross-site scripting (XSS) vulnerabilities in the contact module (admin/modules/contact.php) in Pixie CMS 1.04 allow remote attackers to inject arbitrary web script or HTML via the (1) uemai…
|
CWE-79
Cross-site Scripting
|
CVE-2014-3786
|
2024-11-21 11:08 |
2014-06-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281340
|
- |
|
gnu
|
gnutls
|
Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service (me…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2014-3466
|
2024-11-21 11:08 |
2014-06-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|