Skip to contentOwncloud Server vulnerabilities
- owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud Server before 4.0.8 allow remote...CVE-2012-50564.3 Medium
- owncloud serverownCloud before 5.0.15 and 6.x before 6.0.2, when the file_external app is enabled, allows remote...CVE-2014-25854.9 Medium
- owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud before 6.0.2 allow remote...CVE-2014-20574.3 Medium
- owncloud, owncloud server +1 moreUnspecified vulnerability in core/settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6...CVE-2013-73446.5 Medium
- owncloud, owncloud server +1 moreUnspecified vulnerability in core/ajax/translations.php in ownCloud before 4.0.12 and 4.5.x...CVE-2013-0303Public exploit6.5 Medium
- owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow...CVE-2013-02014.3 Medium
- owncloud, owncloud server +1 moreCross-site request forgery (CSRF) vulnerability in apps/calendar/ajax/settings/settimezone in...CVE-2013-03016.8 Medium
- owncloud serverMultiple cross-site request forgery (CSRF) vulnerabilities in ownCloud 4.5.x before 4.5.7 allow...CVE-2013-03006.8 Medium
- owncloud, owncloud server +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in ownCloud before 4.0.12 and 4.5.x...CVE-2013-02996.8 Medium
- owncloud, owncloud server +1 moreThe default Flash Cross Domain policies in ownCloud before 5.0.15 and 6.x before 6.0.2 allows...CVE-2014-20495.0 Medium
- owncloud, owncloud server +1 moreSession fixation vulnerability in ownCloud before 6.0.2, when PHP is configured to accept session...CVE-2014-20476.8 Medium
- owncloud, owncloud server +1 moreIncomplete blacklist vulnerability in ownCloud before 5.0.6 allows remote authenticated users to...CVE-2013-20894.6 Medium
- owncloud serverThe configuration loader in ownCloud 5.0.x before 5.0.6 allows remote attackers to obtain CSRF...CVE-2013-20865.0 Medium
- owncloud, owncloud server +1 moreownCloud before 5.0.6 does not properly check permissions, which allows remote authenticated...CVE-2013-20486.5 Medium
- owncloud, owncloud server +1 moreThe login page (aka index.php) in ownCloud before 5.0.6 does not disable the autocomplete setting...CVE-2013-20472.1 Low
- owncloud, owncloud server +1 moreOpen redirect vulnerability in the Login Page (index.php) in ownCloud before 5.0.6 allows remote...CVE-2013-20445.8 Medium
- owncloud, owncloud server +1 moreapps/calendar/ajax/events.php in ownCloud before 4.5.11 and 5.x before 5.0.6 does not properly...CVE-2013-20434.0 Medium
- owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5...CVE-2013-20423.5 Low
- owncloud serverMultiple cross-site scripting (XSS) vulnerabilities in ownCloud 5.0.x before 5.0.6 allow remote...CVE-2013-20413.5 Low
- owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5...CVE-2013-20403.5 Low
- owncloud, owncloud server +1 moreDirectory traversal vulnerability in lib/files/view.php in ownCloud before 4.0.15, 4.5.x 4.5.11,...CVE-2013-20394.0 Medium
- owncloud, owncloud server +1 moreThe contacts application in ownCloud before 4.5.10 and 5.x before 5.0.5 does not properly check...CVE-2013-19634.0 Medium
- fruux sabredav, owncloud server +1 moreSabreDAV Directory Traversal vulnerabilityCVE-2013-1939Fix available5.0 Medium
- owncloud, owncloud server +1 moreIncomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.13 and 4.5.x before...CVE-2013-18513.5 Low
- owncloud, owncloud server +1 moreMultiple incomplete blacklist vulnerabilities in (1) import.php and (2) ajax/uploadimport.php in...CVE-2013-18506.5 Medium
- owncloud serverMultiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.x before 4.5.8 allow remote...CVE-2013-18222.1 Low
- owncloud, owncloud server +1 moreCross-site scripting (XSS) vulnerability in settings.php in ownCloud before 4.0.12 and 4.5.x...CVE-2013-03073.5 Low
- owncloud serverMultiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.x before 4.5.7 allow remote...CVE-2013-02984.3 Medium
- owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.12 and 4.5.x before 4...CVE-2013-02973.5 Low
- owncloud serverSQL injection vulnerability in lib/bookmarks.php in ownCloud Server 4.5.x before 4.5.11 and 5.x...CVE-2013-20466.5 Medium
- owncloud serverSQL injection vulnerability in lib/db.php in ownCloud Server 5.0.x before 5.0.6 allows remote...CVE-2013-20456.5 Medium
- mediaelementjs mediaelement.js, owncloud server +1 moreCross-site scripting (XSS) vulnerability in flashmediaelement.swf in MediaElement.js before 2.11...CVE-2013-19674.3 Medium
- owncloud, owncloud server +1 moreThe admin page in ownCloud before 5.0.13 allows remote attackers to bypass intended access...CVE-2013-6403Fix available6.8 Medium
- happyworm jplayer, owncloud, owncloud server +2 moreMultiple cross-site scripting (XSS) vulnerabilities in actionscript/Jplayer.as in the Flash SWF...CVE-2013-1942Public exploit4.3 Medium
- owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in js/viewer.js in ownCloud before 4.5.12 and...CVE-2013-21503.5 Low
- owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.16 and 5.x before 5.0...CVE-2013-21493.5 Low
- owncloud serverCross-site scripting (XSS) vulnerability in bookmarks/js/bookmarks.js in ownCloud 4.0.x before 4...CVE-2012-56664.3 Medium
- owncloud serverownCloud 4.0.x before 4.0.10 and 4.5.x before 4.5.5 does not properly restrict access to settings...CVE-2012-56654.3 Medium
- owncloud, owncloud server +1 moreIncomplete blacklist vulnerability in lib/filesystem.php in ownCloud before 4.0.9 and 4.5.x...CVE-2012-56106.5 Medium
- owncloud, owncloud server +1 moreIncomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.5.2 allows remote...CVE-2012-56096.5 Medium
- owncloud serverCross-site scripting (XSS) vulnerability in apps/user_webdavauth/settings.php in ownCloud 4.5.x...CVE-2012-56084.3 Medium
- owncloud, owncloud server +1 moreThe "Lost Password" reset functionality in ownCloud before 4.0.9 and 4.5.0 does not properly...CVE-2012-56075.0 Medium
- owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.9 and 4.5.0 allow...CVE-2012-56064.3 Medium
- owncloud, owncloud server +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in ownCloud before 4.0.5 allow remote...CVE-2012-47536.8 Medium
- owncloud, owncloud server +1 moreappconfig.php in ownCloud before 4.0.6 does not properly restrict access, which allows remote...CVE-2012-47525.0 Medium
- owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.1 allow remote...CVE-2012-43974.3 Medium
- owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.2 allow remote...CVE-2012-43964.3 Medium
- owncloud, owncloud server +1 moreCross-site scripting (XSS) vulnerability in index.php in ownCloud before 4.0.3 allows remote...CVE-2012-43954.3 Medium
- owncloud, owncloud server +1 moreCross-site scripting (XSS) vulnerability in apps/files/js/filelist.js in ownCloud before 4.0.5...CVE-2012-43944.3 Medium
- owncloud, owncloud server +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in ownCloud before 4.0.6 allow remote...CVE-2012-43936.8 Medium
- Show moreLoading…