Skip to contentOwncloud vulnerabilities
Newest
- nextcloud server, owncloud +1 moreNextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Reflected XSS...CVE-2016-94666.1 Medium
- nextcloud server, owncloud +1 moreNextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Stored XSS in...CVE-2016-94655.4 Medium
- nextcloud server, owncloud +1 moreNextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.1.2, 9.0.6, and 8.2.9 suffer...CVE-2016-94638.1 High
- nextcloud server, owncloud +1 moreNextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying restore...CVE-2016-94624.3 Medium
- nextcloud server, owncloud +1 moreNextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit...CVE-2016-94614.3 Medium
- nextcloud, owncloud +1 moreNextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a content...CVE-2016-94605.3 Medium
- nextcloud server, owncloud +1 moreNextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a log pollution...CVE-2016-94596.1 Medium
- owncloudownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3...CVE-2017-58676.5 Medium
- owncloudThe autocomplete feature in the E-Mail share dialog in ownCloud Server before 8.1.11, 8.2.x...CVE-2017-58664.3 Medium
- owncloudThe password reset functionality in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x...CVE-2017-58653.7 Low
- owncloud desktop clientownCloud Desktop before 2.2.3 allows local users to execute arbitrary code and possibly gain...CVE-2016-71028.4 High
- owncloudownCloud server before 8.2.6 and 9.x before 9.0.3, when the gallery app is enabled, allows remote...CVE-2016-58765.9 Medium
- nextcloud server, owncloud +1 moreCross-site scripting (XSS) vulnerability in share.js in the gallery application in ownCloud...CVE-2016-74195.4 Medium
- owncloud, owncloud server +1 moreownCloud Server before 8.0.9 and 8.1.x before 8.1.4 allow remote authenticated users to obtain...CVE-2016-15014.3 Medium
- owncloud, owncloud server +1 moreownCloud Server before 7.0.12, 8.0.x before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2,...CVE-2016-15003.1 Low
- owncloud, owncloud server +1 moreownCloud Server before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allow remote...CVE-2016-14998.5 High
- owncloud, owncloud server +1 moreCross-site scripting (XSS) vulnerability in the OCS discovery provider component in ownCloud...CVE-2016-14986.1 Medium
- owncloud clientownCloud iOS app before 3.4.4 does not properly switch state between multiple instances, which...CVE-2015-59555.0 Medium
- owncloud desktop client, qt +1 moreownCloud Desktop Client before 2.0.1, when compiled with a Qt release after 5.3.x, does not call...CVE-2015-7298Fix available5.1 Medium
- owncloud smb, owncloud +1 moreicewind1991 SMB before 1.0.3 allows remote authenticated users to execute arbitrary SMB commands...CVE-2015-76989.0 High
- owncloud serverThe files_external app in ownCloud Server before 7.0.9, 8.0.x before 8.0.7, and 8.1.x before 8.1...CVE-2015-76999.0 High
- owncloud, owncloud server +1 moreThe virtual filesystem in ownCloud Server before 6.0.9, 7.0.x before 7.0.7, and 8.0.x before 8.0...CVE-2015-59544.0 Medium
- owncloud, owncloud server +1 moreCross-site scripting (XSS) vulnerability in the activity application in ownCloud Server before 7...CVE-2015-59533.5 Low
- microsoft windows, owncloud, owncloud server +2 moreDirectory traversal vulnerability in the routing component in ownCloud Server before 7.0.6 and 8...CVE-2015-4716EPSS 24.8%10.0 High
- owncloud serverownCloud Server before 7.0.8, 8.0.x before 8.0.6, and 8.1.x before 8.1.1 does not properly check...CVE-2015-66704.0 Medium
- owncloud serverDirectory traversal vulnerability in ownCloud Server before 8.0.6 and 8.1.x before 8.1.1 allows...CVE-2015-65007.5 High
- owncloud, owncloud server +1 moreThe external SMB storage driver in ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0.x...CVE-2015-47189.0 High
- owncloud, owncloud server +1 moreThe filename sanitization component in ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0...CVE-2015-47177.8 High
- owncloud, owncloud server +1 moreThe fetch function in OAuth/Curl.php in Dropbox-PHP, as used in ownCloud Server before 6.0.8, 7.x...CVE-2015-47154.9 Medium
- owncloud desktop clientownCloud Desktop Client before 1.8.2 does not call QNetworkReply::ignoreSslErrors with the list...CVE-2015-4456Fix available2.6 Low
- owncloud serverownCloud Server before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allows remote authenticated...CVE-2015-30136.0 Medium
- owncloud, debian linux +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the contacts application in ownCloud...CVE-2015-30113.5 Low
- owncloud serverThe documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote...CVE-2014-90494.0 Medium
- owncloud, owncloud server +1 moreThe documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote...CVE-2014-90485.0 Medium
- owncloud, owncloud server +1 moreMultiple unspecified vulnerabilities in the preview system in ownCloud 6.x before 6.0.6 and 7.x...CVE-2014-90474.3 Medium
- owncloud, owncloud server +1 moreThe OC_Util::getUrlContent function in ownCloud Server before 5.0.18, 6.x before 6.0.6, and 7.x...CVE-2014-90465.0 Medium
- owncloud, owncloud server +1 moreThe FTP backend in user_external in ownCloud Server before 5.0.18 and 6.x before 6.0.6 allows...CVE-2014-90455.0 Medium
- owncloud serverAsset Pipeline in ownCloud 7.x before 7.0.3 uses an MD5 hash of the absolute file paths of the...CVE-2014-90445.0 Medium
- owncloud, owncloud server +1 moreThe user_ldap (aka LDAP user and group backend) application in ownCloud before 5.0.18, 6.x before...CVE-2014-90435.0 Medium
- owncloud, owncloud server +1 moreCross-site scripting (XSS) vulnerability in the import functionality in the bookmarks application...CVE-2014-90423.5 Low
- owncloud, owncloud server +1 moreThe import functionality in the bookmarks application in ownCloud server before 5.0.18, 6.x...CVE-2014-90416.8 Medium
- owncloudThe SFTP external storage driver (files_external) in ownCloud Server before 6.0.5 validates the...CVE-2014-53414.3 Medium
- owncloud, owncloud server +1 moreIncomplete blacklist vulnerability in ajax/upload.php in ownCloud before 5.0, when running on...CVE-2014-2044Public exploitEPSS 12.4%7.5 High
- owncloud, owncloud server +1 moreDirectory traversal vulnerability in the routing component in ownCloud Server before 5.0.17 and 6...CVE-2014-49296.8 Medium
- owncloud serverownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote attackers to conduct an LDAP...CVE-2014-20517.5 High
- owncloud, owncloud server +1 moreownCloud Server before 4.5.7 does not properly check ownership of calendars, which allows remote...CVE-2013-03044.0 Medium
- owncloud, owncloud server +1 moreUnspecified vulnerability in ownCloud Server before 4.0.12 allows remote attackers to obtain...CVE-2013-03025.0 Medium
- owncloudownCloud Server before 6.0.1 does not properly check permissions, which allows remote...CVE-2014-39634.0 Medium
- owncloud, owncloud server +1 moreownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not properly check permissions, which...CVE-2014-38384.0 Medium
- owncloud, owncloud server +1 moreThe document application in ownCloud Server before 6.0.3 uses sequential values for the file_id,...CVE-2014-38374.0 Medium
- Show moreLoading…