1957 matches found
Authentication flaw
The password reset functionality in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 sends different error messages depending on whether the username is valid, which allows remote attackers to enumerate user names via a large number of password reset...
CVE-2017-5865
The password reset functionality in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 sends different error messages depending on whether the username is valid, which allows remote attackers to enumerate user names via a large number of password reset...
CVE-2017-5865
The password reset functionality in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 sends different error messages depending on whether the username is valid, which allows remote attackers to enumerate user names via a large number of password reset...
CVE-2017-5866
The CVE-2017-5866 issue affects ownCloud Server, where the autocomplete in the E‑Mail share dialog could disclose sensitive information via unspecified vectors. Affected versions are: < 8.1.11, < 8.2.9, < 9.0.7, and
CVE-2017-5867
CVE-2017-5867 affects ownCloud Server prior to 8.1.11, 8.2.x prior to 8.2.9, 9.0.x prior to 9.0.7, and 9.1.x prior to 9.1.3. The issue allows remote authenticated users to cause a denial of service (server hang and logfile flooding) by uploading a one-bit BMP file. Connected documents confirm thi...
CVE-2017-5866
The autocomplete feature in the E-Mail share dialog in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows remote authenticated users to obtain sensitive information via unspecified vectors...
CVE-2017-5867
ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows remote authenticated users to cause a denial of service server hang and logfile flooding via a one bit BMP file...
CVE-2017-5865
The CVE-2017-5865 issue affects ownCloud Server’s password reset function prior to versions 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3. The root cause is that the reset flow returns different error messages depending on whether the username exists, enabling remote atta...
ownCloud Sensitive Information Disclosure Vulnerability (CNVD-2017-02732)
ownCloud is a free and open source personal cloud storage solution that offers file management, music storage, calendars and more. A security vulnerability exists in the ownCloud server that allows remote attackers to submit special requests to obtain sensitive information...
ownCloud Sensitive Information Disclosure Vulnerability
ownCloud is a free and open source personal cloud storage solution that offers file management, music storage, calendars and more. A security vulnerability exists in the ownCloud server that allows remote attackers to submit special requests to obtain sensitive information...
ownCloud server user enumeration vulnerability
ownCloud is a free and open source personal cloud storage solution that offers file management, music storage, calendars and more. A user enumeration vulnerability exists in the ownCloud server, which allows remote attackers to submit a special request to obtain a valid user name...
ownCloud: Outdated Jenkins server hosted at OwnCloud.org
Summary: The target OwnCloud's server is running an outdated version of Jenkins server which is vulnerable to various attacks. Server Location: https://ci.owncloud.org Vulnerable Software: Jenkins ver. 2.27 Proof of Exploitability CVE-2016-3727 POC URL:...
ownCloud End of Life (EOL) Detection
The ownCloud version on the remote host has reached the end of life EOL and should not be used anymore. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
ownCloud Multiple Vulnerabilities (Feb 2017) - Linux
ownCloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; if description...
ownCloud Multiple Vulnerabilities (Feb 2017) - Windows
ownCloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; if description...
ownCloud Direct Request Security Bypass Vulnerability
OwnCloud is a free and open source personal cloud storage solution from German company OwnCloud, which provides file management, music storage, calendaring, etc. OwnCloud Server is a server version. A security vulnerability exists in versions of ownCloud server before 8.2.6 and version 9.x before...
User enumeration with error messages - ownCloud
This issue occurs at sending a password reset E-Mail, where a difference in error messages could allow an attacker to determine if the username is valid or not Affected Software ownCloud Server 9.1.3 CVE-2017-5865 core/d2f47acb38675d2798fe9e9b6294981f24613d40 ownCloud Server 9.0.7 CVE-2017-5865...
Information disclosure in email field dialog at sharing - ownCloud
An attacker can get sensitive information in the E-Mail share dialog with the autocompletion by default Affected Software ownCloud Server 9.1.3 CVE-2017-5866 core/c27b2b935f940a2c8e2fc1a5d8934407ae85dd57 ownCloud Server 9.0.7 CVE-2017-5866 core/62b1865a301a1ce90f9a3c773f5eb00c33deb581 ownCloud...
Flooding logfiles with a 1 Bit BMP File - ownCloud
An Attacker can upload a 1 Bit BMP File and the server hangs and doesn't stop to populate a logfile Affected Software ownCloud Server 9.1.3 CVE-2017-5867 core/0f1da72db6cd3ca08d166d96c57f39b8563d048f ownCloud Server 9.0.7 CVE-2017-5867 core/69fcf706fc7125c028b87fe8224a544ff124dc4b ownCloud Server...
