Lucene search
+L

29 matches found

Snyk
Snyk
•added 2021/01/14 1:02 p.m.•18 views

Prototype Pollution

Overview Affected versions of this package are vulnerable to Prototype Pollution. If an attacker submits a malicious INI file to an application that parses it with loadSharedConfigFiles , they will pollute the prototype on the application. This can be exploited further depending on the context. P...

9.8CVSS9AI score0.02168EPSS
SaveExploits1References2
NVD
NVD
•added 2014/03/14 4:55 p.m.•44 views

CVE-2013-2086

The configuration loader in ownCloud 5.0.x before 5.0.6 allows remote attackers to obtain CSRF tokens and other sensitive information by reading an unspecified JavaScript file...

5CVSS6.2AI score0.01799EPSS
SaveExploits0References1
Prion
Prion
•added 2014/03/14 4:55 p.m.•29 views

Cross site request forgery (csrf)

The configuration loader in ownCloud 5.0.x before 5.0.6 allows remote attackers to obtain CSRF tokens and other sensitive information by reading an unspecified JavaScript file...

5CVSS6.7AI score0.01799EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
•added 2014/03/14 4:55 p.m.•30 views

CVE-2013-2086

The configuration loader in ownCloud 5.0.x before 5.0.6 allows remote attackers to obtain CSRF tokens and other sensitive information by reading an unspecified JavaScript file...

5CVSS5.9AI score0.01799EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2014/03/14 4:55 p.m.•56 views

UBUNTU-CVE-2013-2086

The configuration loader in ownCloud 5.0.x before 5.0.6 allows remote attackers to obtain CSRF tokens and other sensitive information by reading an unspecified JavaScript file...

5CVSS5.8AI score0.01799EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2014/03/14 4:00 p.m.•58 views

CVE-2013-2086

The configuration loader in ownCloud 5.0.x before 5.0.6 allows remote attackers to obtain CSRF tokens and other sensitive information by reading an unspecified JavaScript file...

6.1AI score0.01799EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/03/14 12:00 a.m.•7 views

CVE-2013-2086: Exposure of Sensitive Information to an Unauthorized Actor

The configuration loader in ownCloud 5.0.x before 5.0.6 allows remote attackers to obtain CSRF tokens and other sensitive information by reading an unspecified JavaScript file...

5CVSS5.8AI score0.01799EPSS
SaveExploits0References2
OwnCloud
OwnCloud
•added 2013/05/14 11:42 a.m.•64 views

Server: CSRF token leakage

The configuration loader in ownCloud 5.0.x before 5.0.6 includes private data such as CSRF tokens in a JavaScript file, which allows remote attackers to obtain sensitive information. For more information please consult the official advisory. This advisory is licensed CC BY-SA 4.0...

5CVSS6AI score0.01799EPSS
SaveExploits0Affected Software1
Exploit DB
Exploit DB
•added 2011/05/29 12:00 a.m.•33 views

Puzzle Apps CMS 3.2 - Local File Inclusion

------------------------------------------------------------------------ Software................ Puzzle Apps CMS 3.2 Vulnerability........... Local File Inclusion Site.................... http://www.puzzleapps.org/ Download Link...

5.3AI score
SaveExploits0
Rows per page
Query Builder