ownCloud: GitHub Security Lab (GHSL) Vulnerability Report: Insufficient path validation in ReceiveExternalFilesActivity.java (GHSL-2022-060)

The Owncloud Android app was found to have insufficient path validation in the ReceiveExternalFilesActivity activity, allowing attackers to read from and write to the application's internal storage. This could be exploited by uploading arbitrary files from the app's internal storage or by writing...

ownCloud: GitHub Security Lab (GHSL) Vulnerability Report: SQLInjection in FileContentProvider.kt (GHSL-2022-059)

Vulnerability description not provided...

Malicious code in owncloud-guests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a28ce9d423c6b78dce7622581d188d106a8e067adba46e06fd1bd29d76ab12b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5162 Malicious code in owncloud-guests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a28ce9d423c6b78dce7622581d188d106a8e067adba46e06fd1bd29d76ab12b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview owncloud-guests is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

Malicious code in owncloud-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b73d2645e90a71aa29b0be73285b7dc16c473828ce35288eaf4859c21314386 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5163 Malicious code in owncloud-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b73d2645e90a71aa29b0be73285b7dc16c473828ce35288eaf4859c21314386 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ownCloud < 10.10.0 Information Disclosure Vulnerability

ownCloud is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud";...

CVE-2022-31649

ownCloud owncloud/core before 10.10.0 Improperly Removes Sensitive Information Before Storage or Transfer...

CVE-2022-31649

ownCloud owncloud/core before 10.10.0 Improperly Removes Sensitive Information Before Storage or Transfer...

Design/Logic Flaw

ownCloud owncloud/core before 10.10.0 Improperly Removes Sensitive Information Before Storage or Transfer...

CVE-2022-31649

ownCloud owncloud/core before 10.10.0 Improperly Removes Sensitive Information Before Storage or Transfer...

CVE-2022-31649

The CVE-2022-31649 issue affects ownCloud core before 10.10.0, described as an information disclosure vulnerability where sensitive information is not properly removed before storage or transfer. Related sources indicate plaintext credentials were exposed in settings UI and some API responses, st...

CVE-2022-31649

ownCloud owncloud/core before 10.10.0 Improperly Removes Sensitive Information Before Storage or Transfer...

ownCloud 安全漏洞

ownCloud is a suite of personal cloud storage solutions from US-based ownCloud, Inc. A security vulnerability exists in versions of ownCloud prior to 10.10.0 that stems from incorrectly deleting sensitive information prior to storage or transmission...

PT-2022-20877 · Owncloud · Owncloud

Name of the Vulnerable Software and Affected Versions: ownCloud versions prior to 10.10.0 Description: The issue concerns the improper removal of sensitive information before storage or transfer. Recommendations: For versions prior to 10.10.0, update to version 10.10.0 or later to resolve the iss...

Information disclosure in settings UI and API responses - ownCloud

The settings page and some API responses of a few ownCloud apps contained plaintext credentials...

Security updates in Desktop Client - ownCloud

Even though there are no known vulnerabilities in the ownCloud desktop client we have updated the QT library which includes the zlib library. This is a preventive measure to make sure the client is not vlunerable to the remote code execution vulnerability in zlib...

GHSA-28RM-RJ57-QJPV PHPExcel vulnerable to XXE attacks through libxml

PHPExcel before 1.8.0, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, does not disable external entity loading in libxml, which allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity XXE attack...

PHPExcel vulnerable to XXE attacks through libxml

PHPExcel before 1.8.0, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, does not disable external entity loading in libxml, which allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity XXE attack...