Lucene search
+L

1946 matches found

OSV
OSV
added 2023/01/07 8:15 p.m.18 views

CVE-2016-15014

A vulnerability has been found in CESNET theme-cesnet up to 1.x on ownCloud and classified as problematic. Affected by this vulnerability is an unknown functionality of the file cesnet/core/lostpassword/templates/resetpassword.php. The manipulation leads to insufficiently protected credentials...

5.5CVSS7AI score
SaveExploits0References5
NVD
NVD
added 2023/01/07 8:15 p.m.20 views

CVE-2016-15014

A vulnerability has been found in CESNET theme-cesnet up to 1.x on ownCloud and classified as problematic. Affected by this vulnerability is an unknown functionality of the file cesnet/core/lostpassword/templates/resetpassword.php. The manipulation leads to insufficiently protected credentials...

5.5CVSS4.6AI score0.00227EPSS
SaveExploits0References5
Prion
Prion
added 2023/01/07 8:15 p.m.13 views

Design/Logic Flaw

A vulnerability has been found in CESNET theme-cesnet up to 1.x on ownCloud and classified as problematic. Affected by this vulnerability is an unknown functionality of the file cesnet/core/lostpassword/templates/resetpassword.php. The manipulation leads to insufficiently protected credentials...

1.7CVSS7.2AI score0.00227EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2023/01/07 7:42 p.m.61 views

CVE-2016-15014

Summary: CVE-2016-15014 affects the CESNET theme-cesnet for ownCloud up to version 1.x. The issue concerns an unknown function in cesnet/core/lostpassword/templates/resetpassword.php that results in insufficiently protected credentials. Exploitation is described as local-only. The recommended fix...

5.5CVSS4.7AI score0.00227EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2023/01/07 7:42 p.m.32 views

CVE-2016-15014 CESNET theme-cesnet resetpassword.php insufficiently protected credentials

A vulnerability has been found in CESNET theme-cesnet up to 1.x on ownCloud and classified as problematic. Affected by this vulnerability is an unknown functionality of the file cesnet/core/lostpassword/templates/resetpassword.php. The manipulation leads to insufficiently protected credentials...

3.3CVSS5.6AI score0.00227EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/01/07 12:0 a.m.6 views

theme-cesnet 安全漏洞

theme-cesnet is a CESNET open source custom CESNET theme for ownCloud. A security vulnerability exists in CESNET theme-cesnet versions prior to 2.0.0, which stems from a problem with an unknown function in the file cesnet/core/lostpassword/templates/resetpassword.php, which can lead to insufficie...

5.5CVSS4.8AI score0.00227EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2022/11/21 12:0 a.m.26 views

The vulnerability in the overwrite.config.php implementation: The $domain parameter of the web application for data synchronization with ownCloud allows attackers to perform spoofing attacks.

The vulnerability of the overwrite.config.php script, where $domain is used for the web application’s data synchronization with ownCloud, is related to configuration errors when processing the OWNCLOUDDOMAIN variable. Exploiting this vulnerability allows a malicious actor to perform spear-phishin...

5.3CVSS5.9AI score0.00323EPSS
SaveExploits0References9Affected Software1
NVD
NVD
added 2022/11/10 9:15 p.m.17 views

CVE-2022-43679

The Docker image of ownCloud Server through 10.11 contains a misconfiguration that renders the trusteddomains config useless. This could be abused to spoof the URL in password-reset e-mail messages...

5.3CVSS0.00323EPSS
SaveExploits0References1
Prion
Prion
added 2022/11/10 9:15 p.m.19 views

Design/Logic Flaw

The Docker image of ownCloud Server through 10.11 contains a misconfiguration that renders the trusteddomains config useless. This could be abused to spoof the URL in password-reset e-mail messages...

5CVSS5.1AI score0.00323EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/11/10 12:0 a.m.74 views

CVE-2022-43679

CVE-2022-43679 concerns the ownCloud Server Docker image (versions prior to 10.11) with a misconfiguration that renders the trusted_domains setting useless, enabling spoofing of the URL in password-reset emails. Multiple connected sources corroborate that the issue is tied to the Docker image’s m...

5.3CVSS5.1AI score0.00323EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2022/11/10 12:0 a.m.14 views

CVE-2022-43679

The Docker image of ownCloud Server through 10.11 contains a misconfiguration that renders the trusteddomains config useless. This could be abused to spoof the URL in password-reset e-mail messages...

4.2CVSS6.7AI score0.00323EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2022/11/10 12:0 a.m.28 views

CVE-2022-43679

The Docker image of ownCloud Server through 10.11 contains a misconfiguration that renders the trusteddomains config useless. This could be abused to spoof the URL in password-reset e-mail messages...

4.2CVSS5.4AI score0.00323EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/11/10 12:0 a.m.7 views

ownCloud 安全漏洞

ownCloud is a suite of personal cloud storage solutions from US-based ownCloud. A security vulnerability exists in ownCloud Server version 10.11 and earlier versions, which stems from a Docker image containing a misconfiguration that renders the trusteddomains configuration useless...

5.3CVSS5.7AI score0.00323EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2022/11/10 12:0 a.m.9 views

CVE-2022-43679

The Docker image of ownCloud Server through 10.11 contains a misconfiguration that renders the trusteddomains config useless. This could be abused to spoof the URL in password-reset e-mail messages...

4.2CVSS5.2AI score0.00323EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/10/20 12:0 a.m.9 views

PT-2022-5543 · Owncloud · Owncloud Server

Name of the Vulnerable Software and Affected Versions: ownCloud Server versions prior to 10.11 Description: The issue is related to a misconfiguration in the ownCloud Server Docker image that affects the trusted domains config, making it useless. This could be exploited to spoof the URL in...

5.3CVSS5.1AI score0.00323EPSS
SaveExploits0References12
OwnCloud
OwnCloud
added 2022/10/18 12:0 a.m.66 views

URL spoofing in password reset mail - ownCloud

The docker image of the ownCloud server contained a misconfiguration which rendered the ‘trusteddomains’ config useless. This could be abused to spoof the URL in password reset mails...

4.2CVSS2.1AI score0.00323EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2022/08/15 12:0 a.m.18 views

Fedora: Security Advisory for owncloud-client (FEDORA-2022-d6faaa50eb)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.7AI score0.02749EPSS
SaveExploits0References2
Fedora
Fedora
added 2022/08/14 3:1 a.m.75 views

[SECURITY] Fedora 35 Update: owncloud-client-2.10.1-1.fc35

Owncloud-client enables you to connect to your private ownCloud Server. With it you can create folders in your home directory, and keep the contents of those folders synced with your ownCloud server. Simply copy a file into the directory and the ownCloud Client does the rest...

7.8CVSS2.3AI score0.02749EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2022/08/14 12:0 a.m.17 views

Fedora: Security Advisory for owncloud-client (FEDORA-2022-8d623b4c3f)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.7AI score0.02749EPSS
SaveExploits0References2
Fedora
Fedora
added 2022/08/13 1:26 a.m.60 views

[SECURITY] Fedora 36 Update: owncloud-client-2.10.1-1.fc36

Owncloud-client enables you to connect to your private ownCloud Server. With it you can create folders in your home directory, and keep the contents of those folders synced with your ownCloud server. Simply copy a file into the directory and the ownCloud Client does the rest...

7.8CVSS2.3AI score0.02749EPSS
SaveExploits0
Rows per page
Query Builder