Skip to content
OpenAdvisories

Archive

4 June 2014

Vulnerabilities first published on this day (UTC), newest first.

← May 2014 2014 / June /4 July 2014 →
  1. 14
  2. 231
  3. 310
  4. 430
  5. 532
  6. 612
  7. 71
  8. 817
  9. 923
  10. 1013
  11. 11102
  12. 12 
  13. 1323
  14. 146
  15. 15 
  16. 1611
  17. 1719
  18. 1834
  19. 1919
  20. 2011
  21. 218
  22. 223
  23. 239
  24. 24 
  25. 2511
  26. 26 
  27. 274
  28. 2812
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

30 results · Feed

  • Unscored —
    CVE-2012-6143

    Spoon::Cookie in the Spoon module 0.24 for Perl does not properly use the Storable::thaw function, which allows remote …

  • Unscored —
    CVE-2012-6142

    Session::Cookie in the HTML::EP module 0.2011 for Perl does not properly use the Storable::thaw function, which allows …

  • Unscored —
    CVE-2012-6141

    The App::Context module 0.01 through 0.968 for Perl does not properly use the Storable::thaw function, which allows rem…

  • Unscored —
    CVE-2013-0204

    settings/personal.php in ownCloud 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code vi…

  • Unscored —
    CVE-2013-1941

    The installation routine in ownCloud Server before 4.0.14, 4.5.x before 4.5.9, and 5.0.x before 5.0.4 uses the time fun…

  • Unscored —
    CVE-2012-5056

    Multiple cross-site scripting (XSS) vulnerabilities in ownCloud Server before 4.0.8 allow remote attackers to inject ar…

  • Unscored —
    CVE-2012-5057

    CRLF injection vulnerability in ownCloud Server before 4.0.8 allows remote attackers to inject arbitrary HTTP headers a…

  • Unscored —
    CVE-2012-5336

    lib/base.php in ownCloud before 4.0.8 does not properly validate the user_id session variable, which allows remote auth…

  • Unscored —
    CVE-2014-3837

    The document application in ownCloud Server before 6.0.3 uses sequential values for the file_id, which allows remote au…

  • Unscored —
    CVE-2014-3962 Public exploit

    Multiple SQL injection vulnerabilities in Videos Tube 1.0 allow remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2014-3949

    Cross-site scripting (XSS) vulnerability in the layout wizard in the Grid Elements (gridelements) extension before 1.5.…

  • Unscored —
    CVE-2014-3948

    Cross-site scripting (XSS) vulnerability in the HTML export wizard in the backend module in the powermail extension bef…

  • Unscored —
    CVE-2014-3961 Public exploit

    SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5.4.9 for WordPress all…

  • Unscored —
    CVE-2014-3836

    Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud Server before 6.0.3 allow remote attackers to hi…

  • Unscored —
    CVE-2014-3838

    ownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not properly check permissions, which allows remote authentic…

  • Unscored —
    CVE-2014-3963

    ownCloud Server before 6.0.1 does not properly check permissions, which allows remote authenticated users to access arb…

  • Unscored —
    CVE-2014-3913 Public exploit EPSS 61%

    Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2014-3835

    ownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not check permissions to the files_external application, whic…

  • Unscored —
    CVE-2014-3834

    ownCloud Server before 6.0.3 does not properly check permissions, which allows remote authenticated users to (1) access…

  • Unscored —
    CVE-2014-3832

    Cross-site scripting (XSS) vulnerability in the Documents component in ownCloud Server 6.0.x before 6.0.3 allows remote…

  • Unscored —
    CVE-2014-3786

    Multiple cross-site scripting (XSS) vulnerabilities in the contact module (admin/modules/contact.php) in Pixie CMS 1.04…

  • Unscored —
    CVE-2014-3960

    Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.12.7 allow remote attackers to inject arbitrary…

  • Unscored —
    CVE-2014-3833

    Multiple cross-site scripting (XSS) vulnerabilities in the (1) Gallery and (2) core components in ownCloud Server befor…

  • Medium —
    CVE-2014-2054

    PHPExcel vulnerable to XXE attacks through libxml

    PHPExcel before 1.8.0, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, does not disable external entity loading in libxml, which allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an …

    phpoffice/phpexcel Packagist
  • Unscored —
    CVE-2014-2056

    PHPDocX, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary fil…

  • High —
    CVE-2014-2055

    XXE in SabreDAV

    SabreDAV before 1.7.11, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.

    sabre/dav php-sabredav Debian Packagist
  • High —
    CVE-2014-2053

    getID3 is vulnerable to XML External Entity (XXE)

    getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.

    wordpress php-getid3 james-heinrich/getid3 Debian Packagist
  • Unscored —
    CVE-2014-0935

    Unspecified vulnerability in IBM Smart Analytics System 7700 before FP 2.1.3.0 and 7710 before FP 2.1.3.0 allows local …

  • Unscored —
    CVE-2014-3956

    The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently sk…

    sendmail sendmail Debian Ubuntu
  • Unscored —
    CVE-2014-2502

    Cross-site scripting (XSS) vulnerability in rsa_fso.swf in EMC RSA Adaptive Authentication (Hosted) 11.0 allows remote …