Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
owncloud owncloud 6.0.2 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2014-3832
Cross-site scripting (XSS) vulnerability in the Documents component in ownCloud Server 6.0.x prior to 6.0.3 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, possibly related to the print_unescaped function.
Owncloud Owncloud 6.0.0
Owncloud Owncloud 6.0.2
Owncloud Owncloud 6.0.1
NA
CVE-2014-9049
The documents application in ownCloud Server 6.x prior to 6.0.6 and 7.x prior to 7.0.3 allows remote authenticated users to obtain all valid session IDs via an unspecified API method.
Owncloud Owncloud 7.0.1
Owncloud Owncloud 7.0.2
Owncloud Owncloud 6.0.0
Owncloud Owncloud 6.0.1
Owncloud Owncloud 6.0.2
Owncloud Owncloud 6.0.3
Owncloud Owncloud 6.0.5
Owncloud Owncloud 6.0.4
Owncloud Owncloud 7.0.0
NA
CVE-2014-3833
Multiple cross-site scripting (XSS) vulnerabilities in the (1) Gallery and (2) core components in ownCloud Server prior to 5.016 and 6.0.x prior to 6.0.3 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors, possibly related to the print_une...
Owncloud Owncloud 5.0.11
Owncloud Owncloud 5.0.13
Owncloud Owncloud 5.0.3
Owncloud Owncloud 5.0.14
Owncloud Owncloud
Owncloud Owncloud 5.0.2
Owncloud Owncloud 5.0.0
Owncloud Owncloud 5.0.1
Owncloud Owncloud 5.0.7
Owncloud Owncloud 5.0.8
Owncloud Owncloud 5.0.9
Owncloud Owncloud 5.0.5
Owncloud Owncloud 5.0.10
Owncloud Owncloud 5.0.12
Owncloud Owncloud 5.0.4
Owncloud Owncloud 5.0.6
Owncloud Owncloud 6.0.0
Owncloud Owncloud 6.0.1
Owncloud Owncloud 6.0.2
NA
CVE-2014-3835
ownCloud Server prior to 5.0.16 and 6.0.x prior to 6.0.3 does not check permissions to the files_external application, which allows remote authenticated users to add external storage via unspecified vectors.
Owncloud Owncloud 6.0.0
Owncloud Owncloud 6.0.2
Owncloud Owncloud 6.0.1
Owncloud Owncloud 5.0.2
Owncloud Owncloud 5.0.3
Owncloud Owncloud 5.0.4
Owncloud Owncloud 5.0.5
Owncloud Owncloud 5.0.6
Owncloud Owncloud 5.0.1
Owncloud Owncloud 5.0.10
Owncloud Owncloud 5.0.11
Owncloud Owncloud 5.0.12
Owncloud Owncloud 5.0.0
Owncloud Owncloud 5.0.13
Owncloud Owncloud 5.0.14
Owncloud Owncloud 5.0.7
Owncloud Owncloud 5.0.9
Owncloud Owncloud
Owncloud Owncloud 5.0.8
NA
CVE-2014-3838
ownCloud Server prior to 5.0.16 and 6.0.x prior to 6.0.3 does not properly check permissions, which allows remote authenticated users to read the names of files of other users by leveraging access to multiple accounts.
Owncloud Owncloud 5.0.0
Owncloud Owncloud 5.0.1
Owncloud Owncloud 5.0.10
Owncloud Owncloud 5.0.8
Owncloud Owncloud 5.0.9
Owncloud Owncloud 5.0.12
Owncloud Owncloud 5.0.14
Owncloud Owncloud 5.0.4
Owncloud Owncloud 5.0.6
Owncloud Owncloud
Owncloud Owncloud 5.0.2
Owncloud Owncloud 5.0.3
Owncloud Owncloud 5.0.11
Owncloud Owncloud 5.0.13
Owncloud Owncloud 5.0.5
Owncloud Owncloud 5.0.7
Owncloud Owncloud 6.0.0
Owncloud Owncloud 6.0.1
Owncloud Owncloud 6.0.2
NA
CVE-2014-4929
Directory traversal vulnerability in the routing component in ownCloud Server prior to 5.0.17 and 6.0.x prior to 6.0.4 allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in a filename, related to index.php.
Owncloud Owncloud 6.0.0
Owncloud Owncloud 6.0.2
Owncloud Owncloud 6.0.1
Owncloud Owncloud 6.0.3
Owncloud Owncloud 5.0.12
Owncloud Owncloud 5.0.14
Owncloud Owncloud 5.0.3
Owncloud Owncloud 5.0.5
Owncloud Owncloud 5.0.11
Owncloud Owncloud 5.0.13
Owncloud Owncloud 5.0.4
Owncloud Owncloud 5.0.6
Owncloud Owncloud 5.0.15
Owncloud Owncloud
Owncloud Owncloud 5.0.2
Owncloud Owncloud 5.0.0
Owncloud Owncloud 5.0.1
Owncloud Owncloud 5.0.10
Owncloud Owncloud 5.0.7
Owncloud Owncloud 5.0.8
Owncloud Owncloud 5.0.9
NA
CVE-2014-9045
The FTP backend in user_external in ownCloud Server prior to 5.0.18 and 6.x prior to 6.0.6 allows remote malicious users to bypass intended authentication requirements via a crafted password.
Owncloud Owncloud 5.0.3
Owncloud Owncloud 5.0.4
Owncloud Owncloud 5.0.5
Owncloud Owncloud 5.0.6
Owncloud Owncloud 5.0.11
Owncloud Owncloud 5.0.12
Owncloud Owncloud 5.0.13
Owncloud Owncloud 5.0.14
Owncloud Owncloud 6.0.1
Owncloud Owncloud 6.0.2
Owncloud Owncloud 6.0.3
Owncloud Owncloud 6.0.4
Owncloud Owncloud 5.0.0
Owncloud Owncloud 5.0.10
Owncloud Owncloud 5.0.16
Owncloud Owncloud 5.0.2
Owncloud Owncloud 5.0.7
Owncloud Owncloud 5.0.9
Owncloud Owncloud 5.0.1
Owncloud Owncloud 5.0.15
Owncloud Owncloud
Owncloud Owncloud 5.0.8
NA
CVE-2014-9043
The user_ldap (aka LDAP user and group backend) application in ownCloud prior to 5.0.18, 6.x prior to 6.0.6, and 7.x prior to 7.0.3 allows remote malicious users to bypass authentication via a null byte in the password and a valid user name, which triggers an unauthenticated bind...
Owncloud Owncloud 5.0.10
Owncloud Owncloud 5.0.11
Owncloud Owncloud 5.0.12
Owncloud Owncloud 5.0.13
Owncloud Owncloud 5.0.9
Owncloud Owncloud 6.0.0
Owncloud Owncloud 6.0.1
Owncloud Owncloud 6.0.2
Owncloud Owncloud 6.0.3
Owncloud Owncloud
Owncloud Owncloud 5.0.2
Owncloud Owncloud 5.0.3
Owncloud Owncloud 5.0.4
Owncloud Owncloud 7.0.2
Owncloud Owncloud 5.0.1
Owncloud Owncloud 5.0.14
Owncloud Owncloud 5.0.15
Owncloud Owncloud 5.0.6
Owncloud Owncloud 5.0.8
Owncloud Owncloud 6.0.5
Owncloud Owncloud 7.0.1
Owncloud Owncloud 5.0.0
NA
CVE-2014-9041
The import functionality in the bookmarks application in ownCloud server prior to 5.0.18, 6.x prior to 6.0.6, and 7.x prior to 7.0.3 does not validate CSRF tokens, which allow remote malicious users to conduct CSRF attacks.
Owncloud Owncloud 5.0.3
Owncloud Owncloud 5.0.4
Owncloud Owncloud 5.0.5
Owncloud Owncloud 5.0.6
Owncloud Owncloud 5.0.11
Owncloud Owncloud 5.0.12
Owncloud Owncloud 5.0.13
Owncloud Owncloud 5.0.14
Owncloud Owncloud 6.0.1
Owncloud Owncloud 6.0.2
Owncloud Owncloud 6.0.3
Owncloud Owncloud 6.0.4
Owncloud Owncloud 5.0.0
Owncloud Owncloud 5.0.10
Owncloud Owncloud 5.0.16
Owncloud Owncloud 5.0.2
Owncloud Owncloud 5.0.7
Owncloud Owncloud 5.0.9
Owncloud Owncloud 7.0.0
Owncloud Owncloud 7.0.2
Owncloud Owncloud 5.0.1
Owncloud Owncloud 5.0.15
NA
CVE-2014-9046
The OC_Util::getUrlContent function in ownCloud Server prior to 5.0.18, 6.x prior to 6.0.6, and 7.x prior to 7.0.3 allows remote malicious users to read arbitrary files via a file:// protocol.
Owncloud Owncloud 5.0.2
Owncloud Owncloud 5.0.3
Owncloud Owncloud 5.0.4
Owncloud Owncloud 5.0.5
Owncloud Owncloud 5.0.11
Owncloud Owncloud 5.0.12
Owncloud Owncloud 5.0.13
Owncloud Owncloud 5.0.14
Owncloud Owncloud 6.0.0
Owncloud Owncloud 6.0.1
Owncloud Owncloud 6.0.2
Owncloud Owncloud 6.0.3
Owncloud Owncloud 5.0.1
Owncloud Owncloud 5.0.15
Owncloud Owncloud
Owncloud Owncloud 5.0.6
Owncloud Owncloud 5.0.8
Owncloud Owncloud 6.0.5
Owncloud Owncloud 7.0.1
Owncloud Owncloud 5.0.0
Owncloud Owncloud 5.0.10
Owncloud Owncloud 5.0.16
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injection
CVE-2006-4304
CVE-2023-26603
CVE-2024-28327
CVE-2023-50363
CVE-2024-21905
template injection
CVE-2024-3400
cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »