CVE-2024-50657

CVE-2024-50657:Incorrect Access Control on Owncloud apk An issue in Owncloud android apk v.4.4.1 allows a physically proximate attacker to escalate privileges via the PassCodeViewModel class, specifically in the checkPassCodeIsValid method. Vulnerability Type Incorrect Access Control Vendor of...

EUVD-2020-23793

Malware in sbrugna...

EUVD-2023-28803

Malicious code in bioql PyPI...

EUVD-2023-28013

Malicious code in bioql PyPI...

CVE-2023-24804

The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Prior to version 3.0, the app has an incomplete fix for a path traversal issue and is vulnerable to two bypass methods. The bypasses may lead to information disclosure when uploading the app’s internal...

CVE-2023-23948

The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Version 2.21.1 of the ownCloud Android app is vulnerable to SQL injection in FileContentProvider.kt. This issue can lead to information disclosure. Two databases, filelist and ownclouddatabase, are...

CVE-2022-25339

ownCloud owncloud/android 2.20 has Incorrect Access Control for local attackers...

CVE-2024-50657

An issue in Owncloud android apk v.4.3.1 allows a physically proximate attacker to escalate privileges via the PassCodeViewModel class, specifically in the checkPassCodeIsValid method...

CVE-2024-50657: Incorrect Default Permissions

An issue in Owncloud android apk v.4.3.1 allows a physically proximate attacker to escalate privileges via the PassCodeViewModel class, specifically in the checkPassCodeIsValid method...

CVE-2024-50657

An issue in Owncloud android apk v.4.3.1 allows a physically proximate attacker to escalate privileges via the PassCodeViewModel class, specifically in the checkPassCodeIsValid method...

CVE-2024-50657

The Owncloud android apk version 4.3.1 (and potentially 4.4.1 ) is vulnerable to an Incorrect Access Control flaw that allows a physically proximate attacker to escalate privileges . The root cause is located in the com.owncloud.android.presentation.security.passcode.PassCodeViewModel class, spec...

PT-2024-34384 · Owncloud · Owncloud

Name of the Vulnerable Software and Affected Versions: Owncloud android apk version 4.3.1 Description: An issue in the Owncloud android application allows a physically proximate attacker to escalate privileges. This is specifically related to the PassCodeViewModel class, in the checkPassCodeIsVal...

Sql injection

The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Version 2.21.1 of the ownCloud Android app is vulnerable to SQL injection in FileContentProvider.kt. This issue can lead to information disclosure. Two databases, filelist and ownclouddatabase, are...

CVE-2023-23948

The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Version 2.21.1 of the ownCloud Android app is vulnerable to SQL injection in "FileContentProvider.kt". This issue can lead to information disclosure. Two databases, "filelist" and "ownclouddatabase", are...

CVE-2023-23948 ownCloud Android app vulnerable to SQL Injection

The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Version 2.21.1 of the ownCloud Android app is vulnerable to SQL injection in FileContentProvider.kt. This issue can lead to information disclosure. Two databases, filelist and ownclouddatabase, are...

CVE-2023-24804 ownCloud Android app vulnerable to Path Traversal

The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Prior to version 3.0, the app has an incomplete fix for a path traversal issue and is vulnerable to two bypass methods. The bypasses may lead to information disclosure when uploading the app’s internal...

CVE-2023-24804

The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Prior to version 3.0, the app has an incomplete fix for a path traversal issue and is vulnerable to two bypass methods. The bypasses may lead to information disclosure when uploading the app’s internal...

PT-2023-19315 · Owncloud · Owncloud Android App

Name of the Vulnerable Software and Affected Versions: ownCloud Android app version 2.21.1 ownCloud Android app versions 3.0 and earlier Description: The ownCloud Android app is affected by a SQL injection issue in FileContentProvider.kt, which can lead to information disclosure. Two databases,...

CVE-2023-23948: Improper Neutralization of Special Elements used in an SQL Command

The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Version 2.21.1 of the ownCloud Android app is vulnerable to SQL injection in FileContentProvider.kt. This issue can lead to information disclosure. Two databases, filelist and ownclouddatabase, are...

CVE-2023-24804: Improper Limitation of a Pathname to a Restricted Directory

The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Prior to version 3.0, the app has an incomplete fix for a path traversal issue and is vulnerable to two bypass methods. The bypasses may lead to information disclosure when uploading the app’s internal...