Lucene search
+L

1960 matches found

zdt
zdt
added 2018/08/16 12:00 a.m.38 views

ownCloud iOS Application 3.7.3 Cross Site Scripting Vulnerability

Exploit for iOS platform in category web applications COMPASS SECURITY ADVISORY https://www.compass-security.com/research/advisories/ Product: ownCloud iOS Application owncloud.iosapp 1 Vendor: ownCloud Gmbh CSNC ID: CSNC-2018-016 CVE ID: N/A Subject: Cross-Site Scripting in ownCloud iOS...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2018/08/15 12:00 a.m.42 views

ownCloud iOS Application 3.7.3 Cross Site Scripting

COMPASS SECURITY ADVISORY https://www.compass-security.com/research/advisories/ Product: ownCloud iOS Application owncloud.iosapp 1 Vendor: ownCloud Gmbh CSNC ID: CSNC-2018-016 CVE ID: N/A Subject: Cross-Site Scripting in ownCloud iOS Application's WebViews Risk: Low Effect: Remotely exploitable...

7.4AI score
SaveExploits0
Hacker One
Hacker One
added 2018/07/04 1:55 p.m.29 views

ownCloud: Possible to steal any protected files on Android

Hi. I have found an issue which allows to retrieve any files from /data/data/com.owncloud.android/ directory. The problem is in exported activity com.owncloud.android.ui.activity.ReceiveExternalFilesActivity which accepts a URI to download files. I see that you've added verification path...

6.8AI score
SaveExploits0
OpenVAS
OpenVAS
added 2018/04/14 12:00 a.m.6469 views

PHPUnit 'CVE-2017-9841' RCE Vulnerability (HTTP) - Active Check

PHPUnit is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only nb: - For very large web pages w...

9.8CVSS7.7AI score0.99999EPSS
SaveExploits20References11
CNVD
CNVD
added 2018/04/08 12:00 a.m.9 views

ownCloud Cross-Site Scripting Vulnerability (CNVD-2018-08527)

ownCloud is a free and open source personal cloud storage solution from German company ownCloud. The solution offers file management, music storage, calendars, and more. A cross-site scripting vulnerability exists in versions prior to ownCloud 6.0.1. A remote attacker can exploit this vulnerabili...

5.4CVSS5.9AI score0.03027EPSS
SaveExploits6References1
OpenVAS
OpenVAS
added 2018/04/02 12:00 a.m.32 views

ownCloud 'OpenID' Access Control Bypass Vulnerability - Linux

ownCloud is prone to an access control bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud";...

9.8CVSS9.7AI score0.02642EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2018/04/02 12:00 a.m.26 views

ownCloud 'OpenID' Access Control Bypass Vulnerability - Windows

ownCloud is prone to an access control bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud";...

9.8CVSS9.7AI score0.02642EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/03/28 12:00 a.m.8 views

ownCloud Server user_openid Security Bypass Vulnerability

ownCloud is a free and open source personal cloud storage solution from the German company ownCloud, which provides file management, music storage, calendaring, etc. ownCloud Server is a server version. useropenid app is one of the user ID acquisition apps. A security vulnerability exists in the...

9.8CVSS7AI score0.02642EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2018/03/26 6:29 p.m.32 views

CVE-2014-2048

The useropenid app in ownCloud Server before 5.0.15 allows remote attackers to obtain access by leveraging an insecure OpenID implementation...

9.8CVSS7.2AI score0.02642EPSS
SaveExploits0References3
NVD
NVD
added 2018/03/26 6:29 p.m.26 views

CVE-2014-2048

The useropenid app in ownCloud Server before 5.0.15 allows remote attackers to obtain access by leveraging an insecure OpenID implementation...

9.8CVSS9.4AI score0.02642EPSS
SaveExploits0References2
Prion
Prion
added 2018/03/26 6:29 p.m.23 views

Information disclosure

The useropenid app in ownCloud Server before 5.0.15 allows remote attackers to obtain access by leveraging an insecure OpenID implementation...

7.5CVSS7AI score0.02642EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2018/03/26 6:29 p.m.5 views

CVE-2014-2048

The useropenid app in ownCloud Server before 5.0.15 allows remote attackers to obtain access by leveraging an insecure OpenID implementation...

9.8CVSS5.6AI score0.02642EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2018/03/26 6:00 p.m.25 views

CVE-2014-2048

The useropenid app in ownCloud Server before 5.0.15 allows remote attackers to obtain access by leveraging an insecure OpenID implementation...

9.4AI score0.02642EPSS
SaveExploits0References2
CVE
CVE
added 2018/03/26 6:00 p.m.52 views

CVE-2014-2048

CVE-2014-2048 corresponds to an access-control bypass in ownCloud Server via the user_openid app caused by an insecure OpenID implementation. Technical details in connected sources show the issue affects ownCloud Server versions prior to 5.0.15, with the vulnerability enabling remote login by an ...

9.8CVSS9.2AI score0.02642EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2018/03/23 12:00 a.m.22 views

ownCloud XSS and CSRF Protection Bypass Vulnerabilities (Mar 2018) - Windows

ownCloud is prone to XSS and CSRF vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud";...

5.4CVSS5.4AI score0.03027EPSS
SaveExploits6References3
OSV
OSV
added 2018/03/20 9:29 p.m.9 views

UBUNTU-CVE-2014-1665

Cross-site scripting XSS vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an uploaded file...

5.4CVSS6.2AI score0.03027EPSS
SaveExploits6References6
NVD
NVD
added 2018/03/20 9:29 p.m.25 views

CVE-2014-1665

Cross-site scripting XSS vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an uploaded file...

5.4CVSS5.1AI score0.03027EPSS
SaveExploits6References5
Prion
Prion
added 2018/03/20 9:29 p.m.17 views

Cross site scripting

Cross-site scripting XSS vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an uploaded file...

3.5CVSS5.6AI score0.03027EPSS
SaveExploits6References5Affected Software1
UbuntuCve
UbuntuCve
added 2018/03/20 9:29 p.m.19 views

CVE-2014-1665

Cross-site scripting XSS vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an uploaded file...

5.4CVSS6.2AI score0.03027EPSS
SaveExploits6References5
Cvelist
Cvelist
added 2018/03/20 9:00 p.m.27 views

CVE-2014-1665

Cross-site scripting XSS vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an uploaded file...

5.1AI score0.03027EPSS
SaveExploits6References5
Rows per page
Query Builder