https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:37:31.188551+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-00124 cnvd-2016-00124 2026-10-03T17:37:31.192286+00:00 cnvd-2016-00124 https://cve.radiocsirt.org/vuln/euvd-2026-92811 EUVD-2026-92811 2026-10-03T17:37:31.192318+00:00 EUVD-2026-92811 https://cve.radiocsirt.org/vuln/fkie_cve-2015-4715 fkie_cve-2015-4715 2026-10-03T17:37:31.192333+00:00

The fetch function in OAuth/Curl.php in Dropbox-PHP, as used in ownCloud Server before 6.0.8, 7.x before 7.0.6, and 8.x before 8.0.4 when an external Dropbox storage has been mounted, allows remote administrators of Dropbox.com to read arbitrary files via an @ (at sign) character in unspecified POST values.

 https://cve.radiocsirt.org/vuln/ghsa-82h9-wxqp-j6pq GHSA-82h9-wxqp-j6pq 2026-10-03T17:37:31.192363+00:00

The fetch function in OAuth/Curl.php in Dropbox-PHP, as used in ownCloud Server before 6.0.8, 7.x before 7.0.6, and 8.x before 8.0.4 when an external Dropbox storage has been mounted, allows remote administrators of Dropbox.com to read arbitrary files via an @ (at sign) character in unspecified POST values.

 https://cve.radiocsirt.org/vuln/gsd-2015-4715 gsd-2015-4715 2026-10-03T17:37:31.192380+00:00 gsd-2015-4715 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-4715 Withdrawn: UBUNTU-CVE-2015-4715 2026-10-03T17:37:31.192391+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: php-dropbox

The fetch function in OAuth/Curl.php in Dropbox-PHP, as used in ownCloud Server before 6.0.8, 7.x before 7.0.6, and 8.x before 8.0.4 when an external Dropbox storage has been mounted, allows remote administrators of Dropbox.com to read arbitrary files via an @ (at sign) character in unspecified POST values.