ownCloud: directory listing in https://demo.owncloud.org/doc/

https://demo.owncloud.org/doc/...

The vulnerability in the web application for data synchronization with ownCloud allows a hacker to read data from arbitrary calendars.

The vulnerability in the web application for data synchronization with ownCloud relates to bypassing authentication by using a user-controlled key. Exploiting this vulnerability allows an attacker, operating remotely, to read data from arbitrary calendars by manipulating the...

The vulnerability in the web application for data synchronization with ownCloud allows a hacker to read the list of directory contents or cause a service failure.

The vulnerability of the web application for syncing data with ownCloud exists due to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to read the content of the directories or cause service failures by manipulating the...

A vulnerability in the web application for data synchronization with ownCloud, allowing a hacker to execute arbitrary code

The vulnerability of the objectstore sub-component of the filesexternal application for data synchronization with ownCloud exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by creating a new mount point remotely...

The vulnerability in the web application for data synchronization with ownCloud allows a hacker to gain access to protected information related to user accounts and cookies.

The vulnerability of a web application for data synchronization with ownCloud is related to the lack of protection for service-related data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain access to protected information such as user accounts and cookies by readin...

[SECURITY] Fedora 21 Update: owncloud-8.0.9-1.fc21

ownCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing r ight on the web. ownCloud is extendable via a simple but powerful API f...

[SECURITY] Fedora 22 Update: owncloud-8.0.9-1.fc22

ownCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing r ight on the web. ownCloud is extendable via a simple but powerful API f...

[SECURITY] Fedora 23 Update: owncloud-8.0.9-1.fc23

ownCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing r ight on the web. ownCloud is extendable via a simple but powerful API f...

Fedora Update for owncloud FEDORA-2015-85760004

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : owncloudclient -- Improper validation of certificates when using self-signed certificates (71af4ded-8864-11e5-af1b-001999f8d30b)

owncloud.org reports : The ownCloud Desktop Client was vulnerable against MITM attacks until version 2.0.0 in combination with self-signed certificates. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXM...

ownCloud: RCE in ci.owncloud.com / ci.owncloud.org

Hi, I know you are more interested in vulnerabilities found in ownCloud Server, but I do would like to inform you on a RCE that can be executed on ci.owncloud.com/org. Vulnerability There is a 0day vulnerability in Jenkins that can be exploited in certain circumstances. The Jenkins instance on...

Updated owncloud packages fix security vulnerabilities

Updated owncloud package fixes security vulnerabilities: The owncloud package has been updated to version 8.0.9, which fixes undisclosed security issues and other bugs...

MGASA-2015-0437 Updated owncloud packages fix security vulnerabilities

Updated owncloud package fixes security vulnerabilities: The owncloud package has been updated to version 8.0.9, which fixes undisclosed security issues and other bugs...

The vulnerability of the web application for data synchronization with ownCloud allows a attacker to reinstall the application or execute arbitrary code.

The vulnerability of the routing subsystem of the web application for data synchronization with ownCloud exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to reinstall the application or execute arbitra...

The vulnerability of the web application for data synchronization with ownCloud allows a attacker to execute arbitrary SMB commands.

The vulnerability of the icewind1991 SMB web application for data synchronization with ownCloud exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary SMB commands...

ownCloud iOS app information disclosure vulnerability

ownCloud iOS app is a free and open source personal cloud storage solution for iOS based platform from OwnCloud Germany. An information disclosure vulnerability exists in versions of the ownCloud iOS app prior to 3.4.4. It allows remote instance administrars to obtain sensitive information about...

The vulnerability of the web application for data synchronization with ownCloud allows a perpetrator to trigger a service failure.

The vulnerability of file name handlers in web applications for data synchronization with ownCloud is related to resource management errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by assigning a specific file name...

The vulnerability of the web application for data synchronization with ownCloud allows a attacker to execute arbitrary SMB commands.

The vulnerability of the driver for the external SMB storage device used by web applications for data synchronization with ownCloud exists because measures to neutralize the special elements used in the operating system commands have not been taken. Exploiting this vulnerability allows a maliciou...

The vulnerability of the web application for data synchronization with ownCloud allows a hacker to inject arbitrary web or HTML code.

The vulnerability of the web application for data synchronization with ownCloud exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code using special symbols within the file name...

The vulnerability of the web application for data synchronization with ownCloud allows a hacker to circumvent existing access restrictions and gain access to users’ files.

The vulnerability of the virtual file system of the web application for data synchronization with ownCloud is related to the lack of data validation during data retrieval. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions and gain access to user files b...