Skip to content

Owncloud vulnerabilities

Products

Newest

owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in js/viewer.js in ownCloud before 4.5.12 and...CVE-2013-21503.5 LowJune 18, 2013
owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.16 and 5.x before 5.0...CVE-2013-21493.5 LowJune 18, 2013
owncloud serverCross-site scripting (XSS) vulnerability in bookmarks/js/bookmarks.js in ownCloud 4.0.x before 4...CVE-2012-56664.3 MediumJanuary 3, 2013
owncloud serverownCloud 4.0.x before 4.0.10 and 4.5.x before 4.5.5 does not properly restrict access to settings...CVE-2012-56654.3 MediumJanuary 3, 2013
owncloud, owncloud server +1 moreIncomplete blacklist vulnerability in lib/filesystem.php in ownCloud before 4.0.9 and 4.5.x...CVE-2012-56106.5 MediumDecember 18, 2012
owncloud, owncloud server +1 moreIncomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.5.2 allows remote...CVE-2012-56096.5 MediumDecember 18, 2012
owncloud serverCross-site scripting (XSS) vulnerability in apps/user_webdavauth/settings.php in ownCloud 4.5.x...CVE-2012-56084.3 MediumDecember 18, 2012
owncloud, owncloud server +1 moreThe "Lost Password" reset functionality in ownCloud before 4.0.9 and 4.5.0 does not properly...CVE-2012-56075.0 MediumDecember 18, 2012
owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.9 and 4.5.0 allow...CVE-2012-56064.3 MediumDecember 18, 2012
owncloud, owncloud server +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in ownCloud before 4.0.5 allow remote...CVE-2012-47536.8 MediumSeptember 5, 2012
owncloud, owncloud server +1 moreappconfig.php in ownCloud before 4.0.6 does not properly restrict access, which allows remote...CVE-2012-47525.0 MediumSeptember 5, 2012
owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.1 allow remote...CVE-2012-43974.3 MediumSeptember 5, 2012
owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.2 allow remote...CVE-2012-43964.3 MediumSeptember 5, 2012
owncloud, owncloud server +1 moreCross-site scripting (XSS) vulnerability in index.php in ownCloud before 4.0.3 allows remote...CVE-2012-43954.3 MediumSeptember 5, 2012
owncloud, owncloud server +1 moreCross-site scripting (XSS) vulnerability in apps/files/js/filelist.js in ownCloud before 4.0.5...CVE-2012-43944.3 MediumSeptember 5, 2012
owncloud, owncloud server +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in ownCloud before 4.0.6 allow remote...CVE-2012-43936.8 MediumSeptember 5, 2012
owncloud serverindex.php in ownCloud 4.0.7 does not properly validate the oc_token cookie, which allows remote...CVE-2012-43927.5 HighSeptember 5, 2012
owncloud, owncloud server +1 moreCross-site request forgery (CSRF) vulnerability in core/ajax/appconfig.php in ownCloud before 4.0...CVE-2012-43916.8 MediumSeptember 5, 2012
owncloud, owncloud server +1 more(1) apps/calendar/appinfo/remote.php and (2) apps/contacts/appinfo/remote.php in ownCloud before...CVE-2012-43904.0 MediumSeptember 5, 2012
owncloud, owncloud server +1 moreIncomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.7 allows remote...CVE-2012-43896.8 MediumSeptember 5, 2012
owncloud, owncloud server +1 moreCross-site scripting (XSS) vulnerability in files/ajax/download.php in ownCloud before 3.0.3...CVE-2012-23984.3 MediumApril 20, 2012
owncloud, owncloud server +1 moreCross-site request forgery (CSRF) vulnerability in ownCloud before 3.0.3 allows remote attackers...CVE-2012-23976.8 MediumApril 20, 2012
owncloud, owncloud server +1 moreOpen redirect vulnerability in index.php (aka the Login Page) in ownCloud before 3.0.3 allows...CVE-2012-2270Public exploit5.8 MediumApril 20, 2012
owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud before 3.0.3 allow remote...CVE-2012-22694.3 MediumApril 20, 2012