CVE-2015-3013

The CVE-2015-3013 entry applies to ownCloud Server releases before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5, where authenticated remote users could bypass the file blacklist and upload arbitrary files by using UTF-8 encoded paths (demonstrated with .htaccess). Exploitation requires authenti...

CVE-2015-3012

WebODF (used by ownCloud) is affected by CVE-2015-3012: multiple XSS vulnerabilities allow remote attackers to inject arbitrary script or HTML via (1) style, (2) font name, (3) javascript, or (4) data URI parameters. Affected version: WebODF before 0.5.5. Root cause is insufficient filtering of t...

[SECURITY] [DSA 3244-1] owncloud security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3244-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 02, 2015 http://www.debian.org/security/faq -...

owncloud multiple security vulnerabilities

CSRF, XSS, limitations bypass...

[ MDVSA-2015:190 ] owncloud

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:190 http://www.mandriva.com/en/support/security/ Package : owncloud Date : April 1, 2015 Affected: Business Server 1.0 Problem Description: Multiple vulnerabilities has been discovered and corrected in...

[ MDVSA-2015:191 ] owncloud

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:191 http://www.mandriva.com/en/support/security/ Package : owncloud Date : April 1, 2015 Affected: Business Server 2.0 Problem Description: Multiple vulnerabilities has been discovered and corrected in...

Debian DSA-3244-1 : owncloud - security update

Multiple vulnerabilities were discovered in ownCloud, a cloud storage web service for files, music, contacts, calendars and many more. - CVE-2015-3011 Hugh Davenport discovered that the 'contacts' application shipped with ownCloud is vulnerable to multiple stored cross-site scripting attacks. Thi...

[SECURITY] [DSA 3244-1] owncloud security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3244-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 02, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3244-1] owncloud security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3244-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 02, 2015 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 3244-1 (owncloud - security update)

Multiple vulnerabilities were discovered in ownCloud, a cloud storage web service for files, music, contacts, calendars and many more. CVE-2015-3011Hugh Davenport discovered that the contacts application shipped with ownCloud is vulnerable to multiple stored cross-site scripting attacks. This...

DSA-3244-1 owncloud - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3244-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 21 : owncloud-7.0.5-2.fc21 (2015-4476)

This update provides the new release 7.0.5, which resolves currently undisclosed security vulnerabilities in ownCloud. It is a minor version update and should apply without any issues or special handling, but as usual, we recommend backing up your data, configuration, and database before updating...

Fedora 20 : owncloud-7.0.5-2.fc20 (2015-4693)

This update provides the new release 7.0.5, which resolves currently undisclosed security vulnerabilities in ownCloud. It is a minor version update and should apply without any issues or special handling, but as usual, we recommend backing up your data, configuration, and database before updating...

Fedora Update for owncloud FEDORA-2015-4476

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for owncloud FEDORA-2015-4693

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 21 Update: owncloud-7.0.5-2.fc21

ownCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing r ight on the web. ownCloud is extendable via a simple but powerful API f...

[SECURITY] Fedora 20 Update: owncloud-7.0.5-2.fc20

ownCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing r ight on the web. ownCloud is extendable via a simple but powerful API f...

Mandriva Linux Security Advisory : owncloud (MDVSA-2015:191)

Multiple vulnerabilities has been discovered and corrected in owncloud : - Multiple stored XSS in contacts application oC-SA-2015-001 - Multiple stored XSS in documents application oC-SA-2015-002 - Bypass of file blacklist oC-SA-2015-004 The updated packages have been upgraded to the 7.0.5 versio...

Mandriva Linux Security Advisory : owncloud (MDVSA-2015:190)

Multiple vulnerabilities has been discovered and corrected in owncloud : - Login bypass when using userldap due to unauthenticated binds oC-SA-2014-020 - Login bypass when using the external FTP user backend oC-SA-2014-022 - CSRF in bookmarks application oC-SA-2014-027 - Stored XSS in bookmarks...