Owncloud Server vulnerabilities

• owncloud, owncloud server +1 more An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify,... CVE-2023-49105 In KEVPublic exploit EPSS 43.2% 9.8 CriticalNovember 21, 2023
• owncloud server ownCloud 10.7 has an incorrect access control vulnerability, leading to remote information... CVE-2021-29659 6.5 MediumMay 20, 2021
• owncloud server ownCloud Server 10.x before 10.3.1 allows an attacker, who has one outgoing share from a victim,... CVE-2020-36252 6.8 MediumFebruary 19, 2021
• owncloud, owncloud server +1 more Zend Framework, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote... CVE-2014-2052 9.8 CriticalFebruary 11, 2020
• owncloud, owncloud server +1 more Cross-site request forgery (CSRF) vulnerability in ownCloud Server before 5.0.15 and 6.0.x before... CVE-2014-2050 6.5 MediumJanuary 23, 2020
• owncloud, owncloud server +1 more Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow... CVE-2013-0203 5.4 MediumNovember 22, 2019
• kiteworks owncloud, owncloud server +1 more Cross-site scripting (XSS) vulnerability in ownCloud 4.5.5, 4.0.10, and earlier allows remote... CVE-2013-0202 6.1 MediumNovember 22, 2019
• owncloud, owncloud server +1 more ownCloud Server before 8.0.9 and 8.1.x before 8.1.4 allow remote authenticated users to obtain... CVE-2016-1501 4.3 MediumJanuary 8, 2016
• owncloud, owncloud server +1 more ownCloud Server before 7.0.12, 8.0.x before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2,... CVE-2016-1500 3.1 LowJanuary 8, 2016
• owncloud, owncloud server +1 more ownCloud Server before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allow remote... CVE-2016-1499 8.5 HighJanuary 8, 2016
• owncloud, owncloud server +1 more Cross-site scripting (XSS) vulnerability in the OCS discovery provider component in ownCloud... CVE-2016-1498 6.1 MediumJanuary 8, 2016
• owncloud server The files_external app in ownCloud Server before 7.0.9, 8.0.x before 8.0.7, and 8.1.x before 8.1... CVE-2015-7699 9.0 HighOctober 18, 2015
• owncloud, owncloud server +1 more The virtual filesystem in ownCloud Server before 6.0.9, 7.0.x before 7.0.7, and 8.0.x before 8.0... CVE-2015-5954 4.0 MediumOctober 18, 2015
• owncloud, owncloud server +1 more Cross-site scripting (XSS) vulnerability in the activity application in ownCloud Server before 7... CVE-2015-5953 3.5 LowOctober 18, 2015
• microsoft windows, owncloud, owncloud server +2 more Directory traversal vulnerability in the routing component in ownCloud Server before 7.0.6 and 8... CVE-2015-4716 EPSS 24.8% 10.0 HighOctober 18, 2015
• owncloud server ownCloud Server before 7.0.8, 8.0.x before 8.0.6, and 8.1.x before 8.1.1 does not properly check... CVE-2015-6670 4.0 MediumSeptember 18, 2015
• owncloud server Directory traversal vulnerability in ownCloud Server before 8.0.6 and 8.1.x before 8.1.1 allows... CVE-2015-6500 7.5 HighSeptember 18, 2015
• owncloud, owncloud server +1 more The external SMB storage driver in ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0.x... CVE-2015-4718 9.0 HighAugust 13, 2015
• owncloud, owncloud server +1 more The filename sanitization component in ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0... CVE-2015-4717 7.8 HighAugust 13, 2015
• owncloud, owncloud server +1 more The fetch function in OAuth/Curl.php in Dropbox-PHP, as used in ownCloud Server before 6.0.8, 7.x... CVE-2015-4715 4.9 MediumAugust 13, 2015
• owncloud server ownCloud Server before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allows remote authenticated... CVE-2015-3013 6.0 MediumMay 2, 2015
• owncloud server The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote... CVE-2014-9049 4.0 MediumFebruary 4, 2015
• owncloud, owncloud server +1 more The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote... CVE-2014-9048 5.0 MediumFebruary 4, 2015
• owncloud, owncloud server +1 more Multiple unspecified vulnerabilities in the preview system in ownCloud 6.x before 6.0.6 and 7.x... CVE-2014-9047 4.3 MediumFebruary 4, 2015
• owncloud, owncloud server +1 more The OC_Util::getUrlContent function in ownCloud Server before 5.0.18, 6.x before 6.0.6, and 7.x... CVE-2014-9046 5.0 MediumFebruary 4, 2015
• owncloud, owncloud server +1 more The FTP backend in user_external in ownCloud Server before 5.0.18 and 6.x before 6.0.6 allows... CVE-2014-9045 5.0 MediumFebruary 4, 2015
• owncloud server Asset Pipeline in ownCloud 7.x before 7.0.3 uses an MD5 hash of the absolute file paths of the... CVE-2014-9044 5.0 MediumFebruary 4, 2015
• owncloud, owncloud server +1 more The user_ldap (aka LDAP user and group backend) application in ownCloud before 5.0.18, 6.x before... CVE-2014-9043 5.0 MediumFebruary 4, 2015
• owncloud, owncloud server +1 more Cross-site scripting (XSS) vulnerability in the import functionality in the bookmarks application... CVE-2014-9042 3.5 LowFebruary 4, 2015
• owncloud, owncloud server +1 more The import functionality in the bookmarks application in ownCloud server before 5.0.18, 6.x... CVE-2014-9041 6.8 MediumFebruary 4, 2015
• owncloud, owncloud server +1 more Incomplete blacklist vulnerability in ajax/upload.php in ownCloud before 5.0, when running on... CVE-2014-2044 Public exploit EPSS 12.4% 7.5 HighOctober 6, 2014
• owncloud, owncloud server +1 more Directory traversal vulnerability in the routing component in ownCloud Server before 5.0.17 and 6... CVE-2014-4929 6.8 MediumAugust 20, 2014
• owncloud server ownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote attackers to conduct an LDAP... CVE-2014-2051 7.5 HighJune 5, 2014
• owncloud, owncloud server +1 more ownCloud Server before 4.5.7 does not properly check ownership of calendars, which allows remote... CVE-2013-0304 4.0 MediumJune 5, 2014
• owncloud, owncloud server +1 more Unspecified vulnerability in ownCloud Server before 4.0.12 allows remote attackers to obtain... CVE-2013-0302 5.0 MediumJune 5, 2014
• owncloud, owncloud server +1 more ownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not properly check permissions, which... CVE-2014-3838 4.0 MediumJune 4, 2014
• owncloud, owncloud server +1 more The document application in ownCloud Server before 6.0.3 uses sequential values for the file_id,... CVE-2014-3837 4.0 MediumJune 4, 2014
• owncloud, owncloud server +1 more Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud Server before 6.0.3 allow... CVE-2014-3836 6.8 MediumJune 4, 2014
• owncloud, owncloud server +1 more ownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not check permissions to the... CVE-2014-3835 5.5 MediumJune 4, 2014
• owncloud, owncloud server +1 more ownCloud Server before 6.0.3 does not properly check permissions, which allows remote... CVE-2014-3834 7.5 HighJune 4, 2014
• owncloud, owncloud server +1 more Multiple cross-site scripting (XSS) vulnerabilities in the (1) Gallery and (2) core components in... CVE-2014-3833 4.3 MediumJune 4, 2014
• owncloud server Cross-site scripting (XSS) vulnerability in the Documents component in ownCloud Server 6.0.x... CVE-2014-3832 4.3 MediumJune 4, 2014
• owncloud server, phpdocx +1 more PHPDocX, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers... CVE-2014-2056 7.5 HighJune 4, 2014
• fruux sabredav, owncloud server +1 more XXE in SabreDAV CVE-2014-2055 Fix available 7.5 HighJune 4, 2014
• owncloud server, phpexcel project phpexcel +1 more PHPExcel vulnerable to XXE attacks through libxml CVE-2014-2054 Fix available 7.5 HighJune 4, 2014
• getid3, owncloud server +1 more getID3 is vulnerable to XML External Entity (XXE) CVE-2014-2053 Fix available 7.5 HighJune 4, 2014
• owncloud, owncloud server +1 more The installation routine in ownCloud Server before 4.0.14, 4.5.x before 4.5.9, and 5.0.x before 5... CVE-2013-1941 5.0 MediumJune 4, 2014
• owncloud server settings/personal.php in ownCloud 4.5.x before 4.5.6 allows remote authenticated users to execute... CVE-2013-0204 4.6 MediumJune 4, 2014
• owncloud, owncloud server +1 more lib/base.php in ownCloud before 4.0.8 does not properly validate the user_id session variable,... CVE-2012-5336 4.0 MediumJune 4, 2014
• owncloud, owncloud server +1 more CRLF injection vulnerability in ownCloud Server before 4.0.8 allows remote attackers to inject... CVE-2012-5057 4.3 MediumJune 4, 2014
• Show olderLoading…