1948 matches found
CVE-2014-3832
Cross-site scripting XSS vulnerability in the Documents component in ownCloud Server 6.0.x before 6.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the printunescaped function...
CVE-2014-2053
CVE-2014-2053 concerns getID3()
CVE-2014-3833
CVE-2014-3833 affects ownCloud Server: multiple XSS flaws in Gallery and core components, exploitable in versions prior to 5.0.16 and 6.0.x prior to 6.0.3, potentially linked to print_unescaped. The connected advisories/entries confirm affected ranges and provide an official remediation path: upg...
CVE-2014-2055
SabreDAV before 1.7.11, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity XXE attack...
CVE-2014-3837
The document application in ownCloud Server before 6.0.3 uses sequential values for the fileid, which allows remote authenticated users to enumerate shared files via unspecified vectors...
CVE-2014-3836
Multiple cross-site request forgery CSRF vulnerabilities in ownCloud Server before 6.0.3 allow remote attackers to hijack the authentication of users for requests that 1 conduct cross-site scripting XSS attacks, 2 modify files, or 3 rename files via unspecified vectors...
CVE-2014-3833
Multiple cross-site scripting XSS vulnerabilities in the 1 Gallery and 2 core components in ownCloud Server before 5.016 and 6.0.x before 6.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the printunescaped function...
CVE-2012-5056
Multiple cross-site scripting XSS vulnerabilities in ownCloud Server before 4.0.8 allow remote attackers to inject arbitrary web script or HTML via the 1 readyCallback parameter to apps/filesodfviewer/src/webodf/webodf/flashput/PUT.swf, the 2 root parameter to apps/gallery/templates/index.php, or...
CVE-2012-5057
CVE-2012-5057 describes a CRLF injection vulnerability in ownCloud Server
CVE-2014-2055
SabreDAV vulnerability (CVE-2014-2055) affects SabreDAV <= 1.7.10 used within ownCloud Server <= 6.0.x (before 6.0.2) and = 5.0.15 or >= 6.0.2) where fixes are implemented. If exploitation details are not provided in the documents, they are not assumed; only the explicit XXE risk and aff...
CVE-2013-0204
CVE-2013-0204 affects ownCloud 4.5.x before 4.5.6. A vulnerability in settings/personal.php allows an authenticated remote user to execute arbitrary PHP code via crafted mount point settings, enabling remote code execution. The issue is documented in the official ownCloud advisory OC-SA-2013-002,...
CVE-2012-5057
CRLF injection vulnerability in ownCloud Server before 4.0.8 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the url path parameter...
CVE-2014-2055
SabreDAV before 1.7.11, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity XXE attack...
CVE-2014-3832
Cross-site scripting XSS vulnerability in the Documents component in ownCloud Server 6.0.x before 6.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the printunescaped function...
CVE-2014-3835
The CVE-2014-3835 entry concerns ownCloud Server where the files_external application does not properly check user permissions. Affected are ownCloud Server < 5.0.16 and
CVE-2013-1941
Summary: CVE-2013-1941 affects ownCloud Server prior to versions 4.0.14, 4.5.x prior to 4.5.9, and 5.0.x prior to 5.0.4. The installation routine used the time() function as the seed for generating the PostgreSQL database user password, producing very low entropy and making brute-force guessing m...
CVE-2014-3838
ownCloud Server before 5.0.16 and 6.0.x before 6.0.3 does not properly check permissions, which allows remote authenticated users to read the names of files of other users by leveraging access to multiple accounts...
CVE-2014-3834
ownCloud Server before 6.0.3 does not properly check permissions, which allows remote authenticated users to 1 access the contacts of other users via the address book or 2 rename files via unspecified vectors...