Show filters
160 Total Results
Displaying 21-30 of 160
Sort by:
Attacker Value
Unknown
CVE-2020-36252
Disclosure Date: February 19, 2021 (last updated February 22, 2025)
ownCloud Server 10.x before 10.3.1 allows an attacker, who has one outgoing share from a victim, to access any version of any file by sending a request for a predictable ID number.
0
Attacker Value
Unknown
CVE-2020-28645
Disclosure Date: February 09, 2021 (last updated February 22, 2025)
Deleting users with certain names caused system files to be deleted. Risk is higher for systems which allow users to register themselves and have the data directory in the web root. This affects ownCloud/core versions < 10.6.
0
Attacker Value
Unknown
CVE-2020-28644
Disclosure Date: February 09, 2021 (last updated February 22, 2025)
The CSRF (Cross Site Request Forgery) token check was improperly implemented on cookie authenticated requests against some ocs API endpoints. This affects ownCloud/core version < 10.6.
0
Attacker Value
Unknown
CVE-2020-16255
Disclosure Date: January 15, 2021 (last updated February 22, 2025)
ownCloud (Core) before 10.5 allows XSS in login page 'forgot password.'
0
Attacker Value
Unknown
CVE-2015-4715
Disclosure Date: February 17, 2020 (last updated February 21, 2025)
The fetch function in OAuth/Curl.php in Dropbox-PHP, as used in ownCloud Server before 6.0.8, 7.x before 7.0.6, and 8.x before 8.0.4 when an external Dropbox storage has been mounted, allows remote administrators of Dropbox.com to read arbitrary files via an @ (at sign) character in unspecified POST values.
0
Attacker Value
Unknown
CVE-2014-2052
Disclosure Date: February 11, 2020 (last updated February 21, 2025)
Zend Framework, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.
0
Attacker Value
Unknown
CVE-2014-2050
Disclosure Date: January 23, 2020 (last updated February 21, 2025)
Cross-site request forgery (CSRF) vulnerability in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote attackers to hijack the authentication of users for requests that reset passwords via a crafted HTTP Host header.
0
Attacker Value
Unknown
CVE-2013-0202
Disclosure Date: December 17, 2019 (last updated November 27, 2024)
Cross-site scripting (XSS) vulnerability in ownCloud 4.5.5, 4.0.10, and earlier allows remote attackers to inject arbitrary web script or HTML via the action parameter to core/ajax/sharing.php.
0
Attacker Value
Unknown
CVE-2013-0203
Disclosure Date: November 22, 2019 (last updated November 27, 2024)
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) unspecified parameters to apps/calendar/ajax/event/new.php or (2) url parameter to apps/bookmarks/ajax/addBookmark.php.
0
Attacker Value
Unknown
CVE-2014-2048
Disclosure Date: March 26, 2018 (last updated November 26, 2024)
The user_openid app in ownCloud Server before 5.0.15 allows remote attackers to obtain access by leveraging an insecure OpenID implementation.
0
