getID3 is vulnerable to XML External Entity (XXE)

getID3 before 1.9.9, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity XXE attack...

GHSA-QG5V-JW6F-RPFJ SabreDAV Directory Traversal vulnerability

The HTML\Browser plugin in SabreDAV before 1.6.9, 1.7.x before 1.7.7, and 1.8.x before 1.8.5, as used in ownCloud, when running on Windows, does not properly check path separators in the base path, which allows remote attackers to read arbitrary files via a \ backslash character...

Owncloud ownCloud Access Control Error Vulnerability

Owncloud is a personal cloud storage solution from Owncloud, a U.S. company. versions prior to Owncloud 2.20 contain an access control error vulnerability that could be exploited by attackers to access the application's internal files...

CVE-2022-25339

ownCloud owncloud/android 2.20 has Incorrect Access Control for local attackers...

CVE-2022-25339

ownCloud owncloud/android 2.20 has Incorrect Access Control for local attackers...

CVE-2022-25339

ownCloud owncloud/android 2.20 has Incorrect Access Control for local attackers...

Improper access control

ownCloud owncloud/android 2.20 has Incorrect Access Control for local attackers...

CVE-2022-25339

ownCloud owncloud/android 2.20 has Incorrect Access Control for local attackers...

CVE-2022-25339

CVE-2022-25339 affects the ownCloud Android client, specifically version 2.20 . The issue is described as an Incorrect Access Control vulnerability that enables a local attacker with access to the device to access internal app files. The core impact is exposure of internal files due to permissive...

CVE-2022-25338

ownCloud owncloud/android before 2.20 has Incorrect Access Control for physically proximate attackers...

CVE-2022-25338

ownCloud owncloud/android before 2.20 has Incorrect Access Control for physically proximate attackers...

Improper access control

ownCloud owncloud/android before 2.20 has Incorrect Access Control for physically proximate attackers...

CVE-2022-25338

ownCloud owncloud/android before 2.20 has Incorrect Access Control for physically proximate attackers...

CVE-2022-25338

ownCloud owncloud/android before 2.20 has Incorrect Access Control for physically proximate attackers, enabling a local bypass of the app lock. This is supported by NVD, Red Hat, OSV, and the official ownCloud advisory. Exploitation details are not provided in the connected documents, and no fixe...

CVE-2022-25338

ownCloud owncloud/android before 2.20 has Incorrect Access Control for physically proximate attackers...

PT-2022-17222

Name of the Vulnerable Software and Affected Versions ownCloud version 2.20 Description The issue is related to Incorrect Access Control, which can be exploited by local attackers. Recommendations For version 2.20, at the moment, there is no information about a newer version that contains a fix f...

PT-2022-17221

Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 2.20 Description The issue is related to Incorrect Access Control, which can be exploited by physically proximate attackers. Recommendations For versions prior to 2.20, update to version 2.20 or later to resolve the...

CVE-2022-25339: Undefined Security Weakness

ownCloud owncloud/android 2.20 has Incorrect Access Control for local attackers...

Owncloud ownCloud 安全漏洞

Owncloud ownCloud is a personal cloud storage solution from the American company ownCloud Owncloud. There is a security vulnerability in Owncloud owncloud, there is no information about the vulnerability at the moment, please stay tuned to CNNVD or the vendor's announcement...

Owncloud ownCloud 安全漏洞

Owncloud is a personal cloud storage solution from Owncloud, a U.S. company. versions prior to Owncloud 2.20 contain an access control error vulnerability that could be exploited by attackers to access the application's internal files...