Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

owncloud owncloud 4.5.11 vulnerabilities and exploits

(subscribe to this query)
755
VMScore
CVE-2014-2044
Incomplete blacklist vulnerability in ajax/upload.php in ownCloud prior to 5.0, when running on Windows, allows remote authenticated users to bypass intended access restrictions, upload files with arbitrary names, and execute arbitrary code via an Alternate Data Stream (ADS) synt...
Owncloud Owncloud 4.5.7Owncloud Owncloud 4.5.6Owncloud Owncloud 4.5.5Owncloud Owncloud 4.5.10Owncloud Owncloud 4.5.1Owncloud Owncloud 4.0.4Owncloud Owncloud 4.0.3Owncloud Owncloud 4.0.10Owncloud Owncloud 4.0.1Owncloud Owncloud 4.5.4Owncloud Owncloud 4.5.3Owncloud Owncloud 4.5.0Owncloud Owncloud 4.0.9Owncloud Owncloud 4.0.2Owncloud Owncloud 4.0.16Owncloud Owncloud 4.0.0Owncloud Owncloud 3.0.3Owncloud Owncloud 4.5.2Owncloud OwncloudOwncloud Owncloud 4.0.8Owncloud Owncloud 4.0.7Owncloud Owncloud 4.0.15
356
VMScore
CVE-2013-2039
Directory traversal vulnerability in lib/files/view.php in ownCloud prior to 4.0.15, 4.5.x 4.5.11, and 5.x prior to 5.0.6 allows remote authenticated users to access arbitrary files via unspecified vectors.
Owncloud Owncloud 5.0.1Owncloud Owncloud 5.0.2Owncloud Owncloud 5.0.3Owncloud Owncloud 5.0.4Owncloud Owncloud 4.0.10Owncloud Owncloud 4.0.11Owncloud Owncloud 4.0.12Owncloud Owncloud 4.0.13Owncloud Owncloud 4.5.1Owncloud Owncloud 4.5.2Owncloud Owncloud 4.5.7Owncloud Owncloud 4.5.9Owncloud Owncloud 4.0.1Owncloud OwncloudOwncloud Owncloud 4.0.3Owncloud Owncloud 4.5.3Owncloud Owncloud 4.5.4Owncloud Owncloud 4.5.5Owncloud Owncloud 4.5.6Owncloud Owncloud 4.0.5Owncloud Owncloud 4.0.6Owncloud Owncloud 4.0.7
383
VMScore
CVE-2014-2057
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud prior to 6.0.2 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Owncloud Owncloud 4.0.15Owncloud Owncloud 4.0.16Owncloud Owncloud 4.0.2Owncloud Owncloud 4.0.3Owncloud Owncloud 4.0.4Owncloud Owncloud 4.5.3Owncloud Owncloud 4.5.4Owncloud Owncloud 4.5.5Owncloud Owncloud 4.5.6Owncloud Owncloud 5.0.4Owncloud Owncloud 5.0.5Owncloud Owncloud 5.0.6Owncloud Owncloud 5.0.7Owncloud Owncloud 3.0.1Owncloud Owncloud 4.0.12Owncloud Owncloud 4.0.14Owncloud Owncloud 4.0.6Owncloud Owncloud 4.0.8Owncloud Owncloud 4.5.11Owncloud Owncloud 4.5.13Owncloud Owncloud 4.5.8Owncloud Owncloud 5.0.0
445
VMScore
CVE-2014-2049
The default Flash Cross Domain policies in ownCloud prior to 5.0.15 and 6.x prior to 6.0.2 allows remote malicious users to access user files via unspecified vectors.
Owncloud Owncloud 6.0.1Owncloud Owncloud 6.0.0Owncloud Owncloud 5.0.13Owncloud Owncloud 4.5.8Owncloud Owncloud 4.5.6Owncloud Owncloud 4.5.11Owncloud Owncloud 4.5.1Owncloud Owncloud 4.0.6Owncloud Owncloud 4.0.4Owncloud Owncloud 4.0.12Owncloud Owncloud 4.0.10Owncloud Owncloud 5.0.2Owncloud Owncloud 5.0.4Owncloud Owncloud 5.0.9Owncloud Owncloud 5.0.11Owncloud Owncloud 5.0.10Owncloud Owncloud 5.0.1Owncloud Owncloud 5.0.0Owncloud Owncloud 4.5.0Owncloud Owncloud 4.0.9Owncloud Owncloud 4.0.8Owncloud Owncloud 4.0.7
312
VMScore
CVE-2013-2040
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud prior to 4.0.15, 4.5.x prior to 4.5.11, and 5.0.x prior to 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Owncloud Owncloud 5.0.2Owncloud Owncloud 5.0.3Owncloud Owncloud 5.0.4Owncloud Owncloud 5.0.5Owncloud Owncloud 4.5.1Owncloud Owncloud 4.0.11Owncloud Owncloud 4.0.12Owncloud Owncloud 4.0.13Owncloud OwncloudOwncloud Owncloud 5.0.1Owncloud Owncloud 4.5.2Owncloud Owncloud 4.5.4Owncloud Owncloud 4.5.9Owncloud Owncloud 4.0.1Owncloud Owncloud 4.0.3Owncloud Owncloud 4.0.5Owncloud Owncloud 4.5.5Owncloud Owncloud 4.5.6Owncloud Owncloud 4.5.7Owncloud Owncloud 4.5.8Owncloud Owncloud 4.0.6Owncloud Owncloud 4.0.7
578
VMScore
CVE-2013-2046
SQL injection vulnerability in lib/bookmarks.php in ownCloud Server 4.5.x prior to 4.5.11 and 5.x prior to 5.0.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Owncloud Owncloud 4.5.6Owncloud Owncloud 4.5.7Owncloud Owncloud 4.5.8Owncloud Owncloud 4.5.9Owncloud Owncloud 4.5.3Owncloud Owncloud 4.5.5Owncloud Owncloud 4.5.0Owncloud Owncloud 4.5.1Owncloud Owncloud 4.5.10Owncloud Owncloud 4.5.2Owncloud Owncloud 4.5.4Owncloud Owncloud 5.0.1Owncloud Owncloud 5.0.3Owncloud Owncloud 5.0.4Owncloud Owncloud 5.0.5Owncloud Owncloud 5.0.0Owncloud Owncloud 5.0.2
356
VMScore
CVE-2013-2043
apps/calendar/ajax/events.php in ownCloud prior to 4.5.11 and 5.x prior to 5.0.6 does not properly check the ownership of a calendar, which allows remote authenticated users to download arbitrary calendars via the calendar_id parameter.
Owncloud Owncloud 4.5.0Owncloud Owncloud 5.0.0Owncloud Owncloud 4.5.8Owncloud Owncloud 4.5.9Owncloud Owncloud 5.0.2Owncloud Owncloud 5.0.4Owncloud Owncloud 4.5.5Owncloud Owncloud 4.5.7Owncloud Owncloud 4.5.1Owncloud OwncloudOwncloud Owncloud 4.5.2Owncloud Owncloud 4.5.3Owncloud Owncloud 5.0.1Owncloud Owncloud 5.0.3Owncloud Owncloud 5.0.5Owncloud Owncloud 4.5.4Owncloud Owncloud 4.5.6
312
VMScore
CVE-2013-2042
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud prior to 4.0.15, 4.5.x prior to 4.5.11, and 5.0.x prior to 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via the url parameter to (1) apps/bookmarks/ajax/addBookmark.php or (2) apps/bo...
Owncloud Owncloud 5.0.0Owncloud Owncloud 4.5.8Owncloud Owncloud 4.5.9Owncloud Owncloud 4.0.0Owncloud Owncloud 4.0.1Owncloud Owncloud 4.0.9Owncloud Owncloud 5.0.1Owncloud Owncloud 5.0.3Owncloud Owncloud 4.5.4Owncloud Owncloud 4.5.6Owncloud Owncloud 4.0.11Owncloud Owncloud 4.0.13Owncloud Owncloud 4.0.5Owncloud Owncloud 4.0.7Owncloud Owncloud 5.0.5Owncloud Owncloud 4.5.1Owncloud Owncloud 4.5.10Owncloud Owncloud 4.5.2Owncloud OwncloudOwncloud Owncloud 4.0.2Owncloud Owncloud 4.0.3Owncloud Owncloud 4.0.4
435
VMScore
CVE-2013-1942
Multiple cross-site scripting (XSS) vulnerabilities in actionscript/Jplayer.as in the Flash SWF component (jplayer.swf) in jPlayer prior to 2.2.20, as used in ownCloud Server prior to 5.0.4 and other products, allow remote malicious users to inject arbitrary web script or HTML vi...
Happyworm Jplayer 2.1.6Happyworm Jplayer 2.1.0Happyworm Jplayer 2.0.7Happyworm Jplayer 2.0.8Happyworm Jplayer 2.0.16Happyworm Jplayer 2.0.17Happyworm Jplayer 2.0.24Happyworm Jplayer 2.0.25Happyworm Jplayer 2.0.32Happyworm Jplayer 2.0.33Happyworm Jplayer 2.1.4Happyworm Jplayer 2.1.5Happyworm Jplayer 2.0.5Happyworm Jplayer 2.0.6Happyworm Jplayer 2.0.13Happyworm Jplayer 2.0.14Happyworm Jplayer 2.0.15Happyworm Jplayer 2.0.22Happyworm Jplayer 2.0.23Happyworm Jplayer 2.0.30Happyworm Jplayer 2.0.31Happyworm Jplayer 1.1.1
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook