The vulnerability of the web application for data synchronization with ownCloud allows a perpetrator to trigger a service failure.

The vulnerability of file name handlers in web applications for data synchronization with ownCloud is related to resource management errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by assigning a specific file name...

The vulnerability of the web application for data synchronization with ownCloud allows a hacker to circumvent existing access restrictions and gain access to users’ files.

The vulnerability of the virtual file system of the web application for data synchronization with ownCloud is related to the lack of data validation during data retrieval. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions and gain access to user files b...

ownCloud iOS app information disclosure vulnerability

ownCloud iOS app is a free and open source personal cloud storage solution for iOS based platform from OwnCloud Germany. An information disclosure vulnerability exists in versions of the ownCloud iOS app prior to 3.4.4. It allows remote instance administrars to obtain sensitive information about...

The vulnerability of the web application for data synchronization with ownCloud allows a hacker to inject arbitrary web or HTML code.

The vulnerability of the web application for data synchronization with ownCloud exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code using special symbols within the file name...

ownCloud Desktop Client Man-in-the-Middle Attack Vulnerability

The ownCloud Desktop Client is a desktop client for connecting to OwnCloud servers. A man-in-the-middle attack vulnerability exists in versions of ownCloud Desktop Client prior to 2.0.1. An attacker can perform a man-in-the-middle attack by exploiting the server with a self-signed certificate...

CVE-2015-5955

ownCloud iOS app before 3.4.4 does not properly switch state between multiple instances, which might allow remote instance administrators to obtain sensitive credential and cookie information by reading authentication headers...

Authentication flaw

ownCloud iOS app before 3.4.4 does not properly switch state between multiple instances, which might allow remote instance administrators to obtain sensitive credential and cookie information by reading authentication headers...

CVE-2015-5955

CVE-2015-5955 affects the ownCloud iOS app prior to version 3.4.4. The vulnerability arises from improper handling of state when switching between multiple configured ownCloud instances, which may cause the app to continue sending previous authentication headers and leak credentials and cookies t...

CVE-2015-5955

ownCloud iOS app before 3.4.4 does not properly switch state between multiple instances, which might allow remote instance administrators to obtain sensitive credential and cookie information by reading authentication headers...

ownCloud Server Arbitrary Code Execution Vulnerability

ownCloud is the open source file synchronization and sharing solution. A remote code execution vulnerability exists in the filesexternal app in ownCloud Server versions prior to 7.0.9, 8.0.7, and 8.1.x-8.1.2, which allows remote users to execute arbitrary code via a constructed mount point option...

CVE-2015-3996

The default AFSecurityPolicy.validatesDomainName configuration for AFSSLPinningModeNone in the AFNetworking framework before 2.5.3, as used in the ownCloud iOS Library, disables verification of a server hostname against the domain name in the subject's Common Name CN of the X.509 certificate, whi...

CVE-2015-3996

CVE-2015-3996 affects the AFNetworking framework before 2.5.3 (as used by the ownCloud iOS Library). The default AFSSLPinningModeNone disables hostname verification against the certificate’s CN, allowing a MITM attacker to spoof SSL servers with an arbitrary valid certificate. Affected components...

CVE-2015-3996

The default AFSecurityPolicy.validatesDomainName configuration for AFSSLPinningModeNone in the AFNetworking framework before 2.5.3, as used in the ownCloud iOS Library, disables verification of a server hostname against the domain name in the subject's Common Name CN of the X.509 certificate, whi...

CVE-2015-7699

The filesexternal app in ownCloud Server before 7.0.9, 8.0.x before 8.0.7, and 8.1.x before 8.1.2 allows remote authenticated users to instantiate arbitrary classes and possibly execute arbitrary code via a crafted mount point option, related to "objectstore."...

Design/Logic Flaw

The filesexternal app in ownCloud Server before 7.0.9, 8.0.x before 8.0.7, and 8.1.x before 8.1.2 allows remote authenticated users to instantiate arbitrary classes and possibly execute arbitrary code via a crafted mount point option, related to "objectstore."...

CVE-2015-7699

The filesexternal app in ownCloud Server before 7.0.9, 8.0.x before 8.0.7, and 8.1.x before 8.1.2 allows remote authenticated users to instantiate arbitrary classes and possibly execute arbitrary code via a crafted mount point option, related to "objectstore."...

CVE-2015-7699

The filesexternal app in ownCloud Server before 7.0.9, 8.0.x before 8.0.7, and 8.1.x before 8.1.2 allows remote authenticated users to instantiate arbitrary classes and possibly execute arbitrary code via a crafted mount point option, related to "objectstore."...

CVE-2015-7699

The CVE-2015-7699 issue affects the ownCloud Server files_external app and allows remote authenticated users to instantiate arbitrary classes and potentially execute code via a crafted mount point option related to objectstore. Affected versions are: files_external in ownCloud Server pre-7.0.9, 8...

CVE-2015-7298

ownCloud Desktop Client before 2.0.1, when compiled with a Qt release after 5.3.x, does not call QNetworkReply::ignoreSslErrors with the list of errors to be ignored, which makes it easier for remote attackers to conduct man-in-the-middle MITM attacks by leveraging a server using a self-signed...

CVE-2015-7298

ownCloud Desktop Client before 2.0.1, when compiled with a Qt release after 5.3.x, does not call QNetworkReply::ignoreSslErrors with the list of errors to be ignored, which makes it easier for remote attackers to conduct man-in-the-middle MITM attacks by leveraging a server using a self-signed...