owncloud owncloud vulnerabilities and exploits

(subscribe to this query)

The default Flash Cross Domain policies in ownCloud prior to 5.0.15 and 6.x prior to 6.0.2 allows remote malicious users to access user files via unspecified vectors.

Owncloud Owncloud 6.0.0 Owncloud Owncloud 6.0.1 Owncloud Owncloud Owncloud Owncloud 3.0.0 Owncloud Owncloud 3.0.1 Owncloud Owncloud 3.0.2 Owncloud Owncloud 3.0.3 Owncloud Owncloud 4.0.0 Owncloud Owncloud 4.0.1 Owncloud Owncloud 4.0.2 Owncloud Owncloud 4.0.3 Owncloud Owncloud 4.0.4

Multiple cross-site scripting (XSS) vulnerabilities in ownCloud prior to 6.0.2 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Owncloud Owncloud Owncloud Owncloud 3.0.0 Owncloud Owncloud 3.0.1 Owncloud Owncloud 3.0.2 Owncloud Owncloud 3.0.3 Owncloud Owncloud 4.0.0 Owncloud Owncloud 4.0.1 Owncloud Owncloud 4.0.2 Owncloud Owncloud 4.0.3 Owncloud Owncloud 4.0.4 Owncloud Owncloud 4.0.5 Owncloud Owncloud 4.0.6

Incomplete blacklist vulnerability in ajax/upload.php in ownCloud prior to 5.0, when running on Windows, allows remote authenticated users to bypass intended access restrictions, upload files with arbitrary names, and execute arbitrary code via an Alternate Data Stream (ADS) synt...

Owncloud Owncloud Owncloud Owncloud 3.0.0 Owncloud Owncloud 3.0.1 Owncloud Owncloud 3.0.2 Owncloud Owncloud 3.0.3 Owncloud Owncloud 4.0.0 Owncloud Owncloud 4.0.1 Owncloud Owncloud 4.0.2 Owncloud Owncloud 4.0.3 Owncloud Owncloud 4.0.4 Owncloud Owncloud 4.0.5 Owncloud Owncloud 4.0.6

1 EDB exploit

Multiple cross-site scripting (XSS) vulnerabilities in js/viewer.js in ownCloud prior to 4.5.12 and 5.x prior to 5.0.7 allow remote malicious users to inject arbitrary web script or HTML via vectors related to shared files.

Owncloud Owncloud 5.0.0 Owncloud Owncloud 5.0.1 Owncloud Owncloud 5.0.2 Owncloud Owncloud 5.0.3 Owncloud Owncloud 5.0.4 Owncloud Owncloud 5.0.5 Owncloud Owncloud 5.0.6 Owncloud Owncloud Owncloud Owncloud 3.0.0 Owncloud Owncloud 3.0.1 Owncloud Owncloud 3.0.2 Owncloud Owncloud 3.0.3

Multiple unspecified vulnerabilities in the preview system in ownCloud 6.x prior to 6.0.6 and 7.x prior to 7.0.3 allow remote malicious users to read arbitrary files via unknown vectors.

Owncloud Owncloud Owncloud Owncloud 5.0.0 Owncloud Owncloud 5.0.1 Owncloud Owncloud 5.0.2 Owncloud Owncloud 5.0.3 Owncloud Owncloud 5.0.4 Owncloud Owncloud 5.0.5 Owncloud Owncloud 5.0.6 Owncloud Owncloud 5.0.7 Owncloud Owncloud 5.0.8 Owncloud Owncloud 5.0.9 Owncloud Owncloud 5.0.10

The documents application in ownCloud Server 6.x prior to 6.0.6 and 7.x prior to 7.0.3 allows remote malicious users to bypass the password-protection for shared files via the API.

Owncloud Owncloud Owncloud Owncloud 5.0.0 Owncloud Owncloud 5.0.1 Owncloud Owncloud 5.0.2 Owncloud Owncloud 5.0.3 Owncloud Owncloud 5.0.4 Owncloud Owncloud 5.0.5 Owncloud Owncloud 5.0.6 Owncloud Owncloud 5.0.7 Owncloud Owncloud 5.0.8 Owncloud Owncloud 5.0.9 Owncloud Owncloud 5.0.10

The import functionality in the bookmarks application in ownCloud server prior to 5.0.18, 6.x prior to 6.0.6, and 7.x prior to 7.0.3 does not validate CSRF tokens, which allow remote malicious users to conduct CSRF attacks.

Owncloud Owncloud Owncloud Owncloud 5.0.0 Owncloud Owncloud 5.0.1 Owncloud Owncloud 5.0.2 Owncloud Owncloud 5.0.3 Owncloud Owncloud 5.0.4 Owncloud Owncloud 5.0.5 Owncloud Owncloud 5.0.6 Owncloud Owncloud 5.0.7 Owncloud Owncloud 5.0.8 Owncloud Owncloud 5.0.9 Owncloud Owncloud 5.0.10

Cross-site scripting (XSS) vulnerability in the import functionality in the bookmarks application in ownCloud prior to 5.0.18, 6.x prior to 6.0.6, and 7.x prior to 7.0.3 allows remote authenticated users to inject arbitrary web script or HTML by importing a link with an unspecifi...

Owncloud Owncloud Owncloud Owncloud 5.0.0 Owncloud Owncloud 5.0.1 Owncloud Owncloud 5.0.2 Owncloud Owncloud 5.0.3 Owncloud Owncloud 5.0.4 Owncloud Owncloud 5.0.5 Owncloud Owncloud 5.0.6 Owncloud Owncloud 5.0.7 Owncloud Owncloud 5.0.8 Owncloud Owncloud 5.0.9 Owncloud Owncloud 5.0.10

The user_ldap (aka LDAP user and group backend) application in ownCloud prior to 5.0.18, 6.x prior to 6.0.6, and 7.x prior to 7.0.3 allows remote malicious users to bypass authentication via a null byte in the password and a valid user name, which triggers an unauthenticated bind...

Owncloud Owncloud Owncloud Owncloud 5.0.0 Owncloud Owncloud 5.0.1 Owncloud Owncloud 5.0.2 Owncloud Owncloud 5.0.3 Owncloud Owncloud 5.0.4 Owncloud Owncloud 5.0.5 Owncloud Owncloud 5.0.6 Owncloud Owncloud 5.0.7 Owncloud Owncloud 5.0.8 Owncloud Owncloud 5.0.9 Owncloud Owncloud 5.0.10

The OC_Util::getUrlContent function in ownCloud Server prior to 5.0.18, 6.x prior to 6.0.6, and 7.x prior to 7.0.3 allows remote malicious users to read arbitrary files via a file:// protocol.

Owncloud Owncloud Owncloud Owncloud 5.0.0 Owncloud Owncloud 5.0.1 Owncloud Owncloud 5.0.2 Owncloud Owncloud 5.0.3 Owncloud Owncloud 5.0.4 Owncloud Owncloud 5.0.5 Owncloud Owncloud 5.0.6 Owncloud Owncloud 5.0.7 Owncloud Owncloud 5.0.8 Owncloud Owncloud 5.0.9 Owncloud Owncloud 5.0.10

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook