Lucene search
+L

1946 matches found

OSV
OSV
added 2022/05/17 4:42 a.m.21 views

GHSA-QM4X-CH5W-GR62 XXE in SabreDAV

SabreDAV before 1.7.11, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity XXE attack...

7.5CVSS7AI score0.02228EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2022/05/17 4:42 a.m.58 views

XXE in SabreDAV

SabreDAV before 1.7.11, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity XXE attack...

7.5CVSS7.2AI score0.02228EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/05/17 3:6 a.m.26 views

GHSA-5V43-55M5-QR8F getID3 is vulnerable to XML External Entity (XXE)

getID3 before 1.9.9, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity XXE attack...

7.5CVSS9.7AI score0.04681EPSS
SaveExploits1References9
Github Security Blog
Github Security Blog
added 2022/05/17 3:6 a.m.28 views

getID3 is vulnerable to XML External Entity (XXE)

getID3 before 1.9.9, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity XXE attack...

7.5CVSS7.5AI score0.04681EPSS
SaveExploits1References9Affected Software1
OSV
OSV
added 2022/05/14 1:52 a.m.18 views

GHSA-QG5V-JW6F-RPFJ SabreDAV Directory Traversal vulnerability

The HTML\Browser plugin in SabreDAV before 1.6.9, 1.7.x before 1.7.7, and 1.8.x before 1.8.5, as used in ownCloud, when running on Windows, does not properly check path separators in the base path, which allows remote attackers to read arbitrary files via a \ backslash character...

5CVSS6.2AI score0.01779EPSS
SaveExploits0References6
CNVD
CNVD
added 2022/04/11 12:0 a.m.64 views

Owncloud ownCloud Access Control Error Vulnerability

Owncloud is a personal cloud storage solution from Owncloud, a U.S. company. versions prior to Owncloud 2.20 contain an access control error vulnerability that could be exploited by attackers to access the application's internal files...

5.5CVSS5.3AI score0.00212EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/04/07 3:15 p.m.9 views

CVE-2022-25339

ownCloud owncloud/android 2.20 has Incorrect Access Control for local attackers...

5.5CVSS6.1AI score0.00212EPSS
SaveExploits0References2
NVD
NVD
added 2022/04/07 3:15 p.m.24 views

CVE-2022-25339

ownCloud owncloud/android 2.20 has Incorrect Access Control for local attackers...

5.5CVSS0.00212EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/07 3:15 p.m.30 views

CVE-2022-25339

ownCloud owncloud/android 2.20 has Incorrect Access Control for local attackers...

5.5CVSS6.8AI score0.00212EPSS
SaveExploits0References1
Prion
Prion
added 2022/04/07 3:15 p.m.15 views

Improper access control

ownCloud owncloud/android 2.20 has Incorrect Access Control for local attackers...

2.1CVSS5.5AI score0.00212EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/04/07 2:21 p.m.30 views

CVE-2022-25339

ownCloud owncloud/android 2.20 has Incorrect Access Control for local attackers...

5.8AI score0.00212EPSS
SaveExploits0References1
CVE
CVE
added 2022/04/07 2:21 p.m.101 views

CVE-2022-25339

CVE-2022-25339 affects the ownCloud Android client, specifically version 2.20 . The issue is described as an Incorrect Access Control vulnerability that enables a local attacker with access to the device to access internal app files. The core impact is exposure of internal files due to permissive...

5.5CVSS5.4AI score0.00212EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/04/07 2:15 p.m.3 views

CVE-2022-25338

ownCloud owncloud/android before 2.20 has Incorrect Access Control for physically proximate attackers...

6.8CVSS6.7AI score0.00236EPSS
SaveExploits0References2
NVD
NVD
added 2022/04/07 2:15 p.m.31 views

CVE-2022-25338

ownCloud owncloud/android before 2.20 has Incorrect Access Control for physically proximate attackers...

6.8CVSS0.00236EPSS
SaveExploits0References1
Prion
Prion
added 2022/04/07 2:15 p.m.17 views

Improper access control

ownCloud owncloud/android before 2.20 has Incorrect Access Control for physically proximate attackers...

4.6CVSS6.7AI score0.00236EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/04/07 2:1 p.m.38 views

CVE-2022-25338

ownCloud owncloud/android before 2.20 has Incorrect Access Control for physically proximate attackers...

6.9AI score0.00236EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/07 2:1 p.m.29 views

CVE-2022-25338

ownCloud owncloud/android before 2.20 has Incorrect Access Control for physically proximate attackers...

6.8CVSS7AI score0.00236EPSS
SaveExploits0References3
CVE
CVE
added 2022/04/07 2:1 p.m.107 views

CVE-2022-25338

ownCloud owncloud/android before 2.20 has Incorrect Access Control for physically proximate attackers, enabling a local bypass of the app lock. This is supported by NVD, Red Hat, OSV, and the official ownCloud advisory. Exploitation details are not provided in the connected documents, and no fixe...

6.8CVSS6.6AI score0.00236EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/04/07 12:0 a.m.5 views

Owncloud ownCloud 安全漏洞

Owncloud is a personal cloud storage solution from Owncloud, a U.S. company. versions prior to Owncloud 2.20 contain an access control error vulnerability that could be exploited by attackers to access the application's internal files...

5.5CVSS5.5AI score0.00212EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/04/07 12:0 a.m.7 views

Owncloud ownCloud 安全漏洞

Owncloud ownCloud is a personal cloud storage solution from the American company ownCloud Owncloud. There is a security vulnerability in Owncloud owncloud, there is no information about the vulnerability at the moment, please stay tuned to CNNVD or the vendor's announcement...

6.8CVSS6.6AI score0.00236EPSS
SaveExploits0References2
Rows per page
Query Builder