# CVEs published 2014-06-04 30 CVEs were published on June 4, 2014: 0 critical, 0 high. Days are UTC. - [CVE-2012-6141](https://cve.now/CVE-2012-6141.md): The App::Context module 0.01 through 0.968 for Perl does not properly use the Storable::thaw function, which allows remote attackers to exec (no CVSS) - [CVE-2012-6142](https://cve.now/CVE-2012-6142.md): Session::Cookie in the HTML::EP module 0.2011 for Perl does not properly use the Storable::thaw function, which allows remote attackers to e (no CVSS) - [CVE-2012-6143](https://cve.now/CVE-2012-6143.md): Spoon::Cookie in the Spoon module 0.24 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute (no CVSS) - [CVE-2012-5056](https://cve.now/CVE-2012-5056.md): Multiple cross-site scripting (XSS) vulnerabilities in ownCloud Server before 4.0.8 allow remote attackers to inject arbitrary web script or (no CVSS) - [CVE-2012-5057](https://cve.now/CVE-2012-5057.md): CRLF injection vulnerability in ownCloud Server before 4.0.8 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP respo (no CVSS) - [CVE-2012-5336](https://cve.now/CVE-2012-5336.md): lib/base.php in ownCloud before 4.0.8 does not properly validate the user\_id session variable, which allows remote authenticated users to re (no CVSS) - [CVE-2013-0204](https://cve.now/CVE-2013-0204.md): settings/personal.php in ownCloud 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via crafted mount point (no CVSS) - [CVE-2013-1941](https://cve.now/CVE-2013-1941.md): The installation routine in ownCloud Server before 4.0.14, 4.5.x before 4.5.9, and 5.0.x before 5.0.4 uses the time function to seed the gen (no CVSS) - [CVE-2014-2053](https://cve.now/CVE-2014-2053.md): getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cau (no CVSS, james-heinrich/getid3) - [CVE-2014-2054](https://cve.now/CVE-2014-2054.md): PHPExcel before 1.8.0, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, does not disable external entity loading in libxml, (no CVSS, phpoffice/phpexcel) - [CVE-2014-2055](https://cve.now/CVE-2014-2055.md): SabreDAV before 1.7.11, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, ca (no CVSS, sabre/dav) - [CVE-2014-2056](https://cve.now/CVE-2014-2056.md): PHPDocX, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of (no CVSS) - [CVE-2014-3786](https://cve.now/CVE-2014-3786.md): Multiple cross-site scripting (XSS) vulnerabilities in the contact module (admin/modules/contact.php) in Pixie CMS 1.04 allow remote attacke (no CVSS) - [CVE-2014-3832](https://cve.now/CVE-2014-3832.md): Cross-site scripting (XSS) vulnerability in the Documents component in ownCloud Server 6.0.x before 6.0.3 allows remote attackers to inject (no CVSS) - [CVE-2014-3833](https://cve.now/CVE-2014-3833.md): Multiple cross-site scripting (XSS) vulnerabilities in the (1) Gallery and (2) core components in ownCloud Server before 5.016 and 6.0.x bef (no CVSS) - [CVE-2014-3834](https://cve.now/CVE-2014-3834.md): ownCloud Server before 6.0.3 does not properly check permissions, which allows remote authenticated users to (1) access the contacts of othe (no CVSS) - [CVE-2014-3835](https://cve.now/CVE-2014-3835.md): ownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not check permissions to the files\_external application, which allows remote authe (no CVSS) - [CVE-2014-3836](https://cve.now/CVE-2014-3836.md): Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud Server before 6.0.3 allow remote attackers to hijack the authenticati (no CVSS) - [CVE-2014-3837](https://cve.now/CVE-2014-3837.md): The document application in ownCloud Server before 6.0.3 uses sequential values for the file\_id, which allows remote authenticated users to (no CVSS) - [CVE-2014-3838](https://cve.now/CVE-2014-3838.md): ownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not properly check permissions, which allows remote authenticated users to read th (no CVSS) - [CVE-2014-3913](https://cve.now/CVE-2014-3913.md): Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows remote attackers to execute arbitrary code via a request (no CVSS) - [CVE-2014-3948](https://cve.now/CVE-2014-3948.md): Cross-site scripting (XSS) vulnerability in the HTML export wizard in the backend module in the powermail extension before 1.6.11 for TYPO3 (no CVSS) - [CVE-2014-3949](https://cve.now/CVE-2014-3949.md): Cross-site scripting (XSS) vulnerability in the layout wizard in the Grid Elements (gridelements) extension before 1.5.1 and 2.0.x before 2. (no CVSS) - [CVE-2014-3960](https://cve.now/CVE-2014-3960.md): Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.12.7 allow remote attackers to inject arbitrary web script or HTML v (no CVSS) - [CVE-2014-3961](https://cve.now/CVE-2014-3961.md): SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5.4.9 for WordPress allows remote attackers (no CVSS) - [CVE-2014-3962](https://cve.now/CVE-2014-3962.md): Multiple SQL injection vulnerabilities in Videos Tube 1.0 allow remote attackers to execute arbitrary SQL commands via the url parameter to (no CVSS) - [CVE-2014-3963](https://cve.now/CVE-2014-3963.md): ownCloud Server before 6.0.1 does not properly check permissions, which allows remote authenticated users to access arbitrary preview pictur (no CVSS) - [CVE-2014-0935](https://cve.now/CVE-2014-0935.md): Unspecified vulnerability in IBM Smart Analytics System 7700 before FP 2.1.3.0 and 7710 before FP 2.1.3.0 allows local users to gain privile (no CVSS) - [CVE-2014-3956](https://cve.now/CVE-2014-3956.md): The sm\_close\_on\_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected (no CVSS) - [CVE-2014-2502](https://cve.now/CVE-2014-2502.md): Cross-site scripting (XSS) vulnerability in rsa\_fso.swf in EMC RSA Adaptive Authentication (Hosted) 11.0 allows remote attackers to inject a (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2014-06-04 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.