ownCloud Code Execution

The vulnerability of the objectstore sub-component of the filesexternal application for data synchronization with ownCloud exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by creating a new mount point remotely...

CVE-2015-7699

The filesexternal app in ownCloud Server before 7.0.9, 8.0.x before 8.0.7, and 8.1.x before 8.1.2 allows remote authenticated users to instantiate arbitrary classes and possibly execute arbitrary code via a crafted mount point option, related to "objectstore."...

CVE-2015-7699: Improper Input Validation

The filesexternal app in ownCloud Server before 7.0.9, 8.0.x before 8.0.7, and 8.1.x before 8.1.2 allows remote authenticated users to instantiate arbitrary classes and possibly execute arbitrary code via a crafted mount point option, related to "objectstore."...

PT-2015-2578

Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 7.0.9 ownCloud Server versions 8.0.x prior to 8.0.7 ownCloud Server versions 8.1.x prior to 8.1.2 Description The issue allows remote authenticated users to possibly execute arbitrary code via a crafted mount...

Mozilla: Use-after-free in IndexedDB (MFSA 2015-16)

Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via...