Lucene search
+L

2172 matches found

OpenVAS
OpenVAS
•added 2025/12/09 12:00 a.m.•62 views

ownCloud < 10.15.2 Phar Stream Wrapper Vulnerability

ownCloud is prone to a phar stream wrapper vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; if...

7AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/11/07 1:46 p.m.•11 views

CVE-2025-59716

ownCloud Guests before 0.12.5 allows unauthenticated user enumeration via the /apps/guests/register/email/token endpoint. Because of insufficient validation of the supplied token in showPasswordForm, the server responds differently when an e-mail address corresponds to a valid pending guest user...

5.3CVSS7AI score0.00951EPSS
SaveExploits1References1
NVD
NVD
•added 2025/11/05 5:15 p.m.•24 views

CVE-2025-59716

ownCloud Guests before 0.12.5 allows unauthenticated user enumeration via the /apps/guests/register/email/token endpoint. Because of insufficient validation of the supplied token in showPasswordForm, the server responds differently when an e-mail address corresponds to a valid pending guest user...

5.3CVSS0.00951EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/11/05 12:00 a.m.•22 views

EUVD-2025-37881

ownCloud Guests before 0.12.5 allows unauthenticated user enumeration via the /apps/guests/register/email/token endpoint. Because of insufficient validation of the supplied token in showPasswordForm, the server responds differently when an e-mail address corresponds to a valid pending guest user...

5.3CVSS6.4AI score0.00951EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/05 12:00 a.m.•3 views

CVE-2025-59716: Exposure of Sensitive Information to an Unauthorized Actor

ownCloud Guests before 0.12.5 allows unauthenticated user enumeration via the /apps/guests/register/email/token endpoint. Because of insufficient validation of the supplied token in showPasswordForm, the server responds differently when an e-mail address corresponds to a valid pending guest user...

5.3CVSS5.8AI score0.00951EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/11/05 12:00 a.m.•22 views

CVE-2025-59716

ownCloud Guests before 0.12.5 allows unauthenticated user enumeration via the /apps/guests/register/email/token endpoint. Because of insufficient validation of the supplied token in showPasswordForm, the server responds differently when an e-mail address corresponds to a valid pending guest user...

0.00951EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/11/05 12:00 a.m.•20 views

guests 安全漏洞

guests is a file sharing program open-sourced by ownCloud. A security vulnerability exists in guests prior to version 0.12.5, which stems from insufficient token validation in showPasswordForm and could lead to unauthenticated user enumeration...

5.3CVSS6.7AI score0.00951EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/11/05 12:00 a.m.•19 views

PT-2025-45141

Name of the Vulnerable Software and Affected Versions ownCloud Guests versions prior to 0.12.5 Description The application allows unauthenticated user enumeration through the /apps/guests/register/email/token API endpoint. Insufficient validation of the supplied token within the showPasswordForm...

5.3CVSS6.7AI score0.00951EPSS
SaveExploits1References9
Vulnrichment
Vulnrichment
•added 2025/11/05 12:00 a.m.•6 views

CVE-2025-59716

ownCloud Guests before 0.12.5 allows unauthenticated user enumeration via the /apps/guests/register/email/token endpoint. Because of insufficient validation of the supplied token in showPasswordForm, the server responds differently when an e-mail address corresponds to a valid pending guest user...

5.8AI score0.00951EPSS
SaveExploits1References4
CVE
CVE
•added 2025/11/05 12:00 a.m.•72 views

CVE-2025-59716

The ownCloud Guests application, in versions prior to 0.12.5 , is vulnerable to unauthenticated user enumeration . The root cause is insufficient validation of the supplied token within the showPasswordForm function at the /apps/guests/register/{email}/{token} endpoint. An attacker can exploit th...

5.3CVSS5.8AI score0.00951EPSS
SaveIn wildExploits1References4Affected Software1
OSV
OSV
•added 2025/11/05 12:00 a.m.•14 views

CVE-2025-59716

ownCloud Guests before 0.12.5 allows unauthenticated user enumeration via the /apps/guests/register/email/token endpoint. Because of insufficient validation of the supplied token in showPasswordForm, the server responds differently when an e-mail address corresponds to a valid pending guest user...

5.3CVSS6.9AI score
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2015-4026

Malware in sbrugna...

4.3CVSS6.3AI score0.00838EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2016-2085

Malware in sbrugna...

5.5CVSS4.5AI score0.00227EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2017-14942

Malware in sbrugna...

4.3CVSS6AI score0.0103EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2021-22581

Malware in sbrugna...

9.8CVSS8.1AI score0.01482EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2014-8877

Malware in sbrugna...

4CVSS6.4AI score0.00947EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2016-2597

Malware in sbrugna...

8.5CVSS7.8AI score0.03471EPSS
SaveExploits2References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2012-5494

Malware in sbrugna...

4.3CVSS6.2AI score0.01832EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2012-5548

Malware in sbrugna...

4.3CVSS6.4AI score0.02251EPSS
SaveExploits1References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2015-4734

Malware in sbrugna...

7.8CVSS6.1AI score0.02832EPSS
SaveExploits0References6
Rows per page
Query Builder