Skip to contentOwncloud vulnerabilities
Newest
- owncloud, owncloud server +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in ownCloud Server before 6.0.3 allow...CVE-2014-38366.8 Medium
- owncloud, owncloud server +1 moreownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not check permissions to the...CVE-2014-38355.5 Medium
- owncloud, owncloud server +1 moreownCloud Server before 6.0.3 does not properly check permissions, which allows remote...CVE-2014-38347.5 High
- owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the (1) Gallery and (2) core components in...CVE-2014-38334.3 Medium
- owncloud serverCross-site scripting (XSS) vulnerability in the Documents component in ownCloud Server 6.0.x...CVE-2014-38324.3 Medium
- owncloud server, phpdocx +1 morePHPDocX, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers...CVE-2014-20567.5 High
- fruux sabredav, owncloud server +1 moreXXE in SabreDAVCVE-2014-2055Fix available7.5 High
- owncloud server, phpexcel project phpexcel +1 morePHPExcel vulnerable to XXE attacks through libxmlCVE-2014-2054Fix available7.5 High
- getid3, owncloud server +1 moregetID3 is vulnerable to XML External Entity (XXE)CVE-2014-2053Fix available7.5 High
- owncloud, owncloud server +1 moreThe installation routine in ownCloud Server before 4.0.14, 4.5.x before 4.5.9, and 5.0.x before 5...CVE-2013-19415.0 Medium
- owncloud serversettings/personal.php in ownCloud 4.5.x before 4.5.6 allows remote authenticated users to execute...CVE-2013-02044.6 Medium
- owncloud, owncloud server +1 morelib/base.php in ownCloud before 4.0.8 does not properly validate the user_id session variable,...CVE-2012-53364.0 Medium
- owncloud, owncloud server +1 moreCRLF injection vulnerability in ownCloud Server before 4.0.8 allows remote attackers to inject...CVE-2012-50574.3 Medium
- owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud Server before 4.0.8 allow remote...CVE-2012-50564.3 Medium
- owncloud serverownCloud before 5.0.15 and 6.x before 6.0.2, when the file_external app is enabled, allows remote...CVE-2014-25854.9 Medium
- owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud before 6.0.2 allow remote...CVE-2014-20574.3 Medium
- owncloud, owncloud server +1 moreUnspecified vulnerability in core/settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6...CVE-2013-73446.5 Medium
- owncloud, owncloud server +1 moreUnspecified vulnerability in core/ajax/translations.php in ownCloud before 4.0.12 and 4.5.x...CVE-2013-0303Public exploit6.5 Medium
- owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow...CVE-2013-02014.3 Medium
- owncloud, owncloud server +1 moreCross-site request forgery (CSRF) vulnerability in apps/calendar/ajax/settings/settimezone in...CVE-2013-03016.8 Medium
- owncloud serverMultiple cross-site request forgery (CSRF) vulnerabilities in ownCloud 4.5.x before 4.5.7 allow...CVE-2013-03006.8 Medium
- owncloud, owncloud server +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in ownCloud before 4.0.12 and 4.5.x...CVE-2013-02996.8 Medium
- owncloud, owncloud server +1 moreThe default Flash Cross Domain policies in ownCloud before 5.0.15 and 6.x before 6.0.2 allows...CVE-2014-20495.0 Medium
- owncloud, owncloud server +1 moreSession fixation vulnerability in ownCloud before 6.0.2, when PHP is configured to accept session...CVE-2014-20476.8 Medium
- owncloud, owncloud server +1 moreIncomplete blacklist vulnerability in ownCloud before 5.0.6 allows remote authenticated users to...CVE-2013-20894.6 Medium
- owncloud serverThe configuration loader in ownCloud 5.0.x before 5.0.6 allows remote attackers to obtain CSRF...CVE-2013-20865.0 Medium
- owncloudDirectory traversal vulnerability in apps/files_trashbin/index.php in ownCloud Server before 5.0...CVE-2013-20854.0 Medium
- owncloud, owncloud server +1 moreownCloud before 5.0.6 does not properly check permissions, which allows remote authenticated...CVE-2013-20486.5 Medium
- owncloud, owncloud server +1 moreThe login page (aka index.php) in ownCloud before 5.0.6 does not disable the autocomplete setting...CVE-2013-20472.1 Low
- owncloud, owncloud server +1 moreOpen redirect vulnerability in the Login Page (index.php) in ownCloud before 5.0.6 allows remote...CVE-2013-20445.8 Medium
- owncloud, owncloud server +1 moreapps/calendar/ajax/events.php in ownCloud before 4.5.11 and 5.x before 5.0.6 does not properly...CVE-2013-20434.0 Medium
- owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5...CVE-2013-20423.5 Low
- owncloud serverMultiple cross-site scripting (XSS) vulnerabilities in ownCloud 5.0.x before 5.0.6 allow remote...CVE-2013-20413.5 Low
- owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5...CVE-2013-20403.5 Low
- owncloud, owncloud server +1 moreDirectory traversal vulnerability in lib/files/view.php in ownCloud before 4.0.15, 4.5.x 4.5.11,...CVE-2013-20394.0 Medium
- owncloud, owncloud server +1 moreThe contacts application in ownCloud before 4.5.10 and 5.x before 5.0.5 does not properly check...CVE-2013-19634.0 Medium
- fruux sabredav, owncloud server +1 moreSabreDAV Directory Traversal vulnerabilityCVE-2013-1939Fix available5.0 Medium
- owncloud, owncloud server +1 moreIncomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.13 and 4.5.x before...CVE-2013-18513.5 Low
- owncloud, owncloud server +1 moreMultiple incomplete blacklist vulnerabilities in (1) import.php and (2) ajax/uploadimport.php in...CVE-2013-18506.5 Medium
- owncloud serverMultiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.x before 4.5.8 allow remote...CVE-2013-18222.1 Low
- owncloud, owncloud server +1 moreCross-site scripting (XSS) vulnerability in settings.php in ownCloud before 4.0.12 and 4.5.x...CVE-2013-03073.5 Low
- owncloud serverMultiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.x before 4.5.7 allow remote...CVE-2013-02984.3 Medium
- owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.12 and 4.5.x before 4...CVE-2013-02973.5 Low
- owncloud serverSQL injection vulnerability in lib/bookmarks.php in ownCloud Server 4.5.x before 4.5.11 and 5.x...CVE-2013-20466.5 Medium
- owncloud serverSQL injection vulnerability in lib/db.php in ownCloud Server 5.0.x before 5.0.6 allows remote...CVE-2013-20456.5 Medium
- owncloudSQL injection vulnerability in addressbookprovider.php in ownCloud Server before 5.0.1 allows...CVE-2013-18936.5 Medium
- owncloudMultiple cross-site scripting (XSS) vulnerabilities in ownCloud Server before 5.0.1 allow remote...CVE-2013-18904.3 Medium
- mediaelementjs mediaelement.js, owncloud server +1 moreCross-site scripting (XSS) vulnerability in flashmediaelement.swf in MediaElement.js before 2.11...CVE-2013-19674.3 Medium
- owncloud, owncloud server +1 moreThe admin page in ownCloud before 5.0.13 allows remote attackers to bypass intended access...CVE-2013-6403Fix available6.8 Medium
- happyworm jplayer, owncloud, owncloud server +2 moreMultiple cross-site scripting (XSS) vulnerabilities in actionscript/Jplayer.as in the Flash SWF...CVE-2013-1942Public exploit4.3 Medium
- Show moreLoading…