Malicious code in owncloud-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b73d2645e90a71aa29b0be73285b7dc16c473828ce35288eaf4859c21314386 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5163 Malicious code in owncloud-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b73d2645e90a71aa29b0be73285b7dc16c473828ce35288eaf4859c21314386 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ownCloud < 10.10.0 Information Disclosure Vulnerability

ownCloud is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud";...

CVE-2022-31649

ownCloud owncloud/core before 10.10.0 Improperly Removes Sensitive Information Before Storage or Transfer...

CVE-2022-31649

ownCloud owncloud/core before 10.10.0 Improperly Removes Sensitive Information Before Storage or Transfer...

Design/Logic Flaw

ownCloud owncloud/core before 10.10.0 Improperly Removes Sensitive Information Before Storage or Transfer...

CVE-2022-31649

The CVE-2022-31649 issue affects ownCloud core before 10.10.0, described as an information disclosure vulnerability where sensitive information is not properly removed before storage or transfer. Related sources indicate plaintext credentials were exposed in settings UI and some API responses, st...

CVE-2022-31649

ownCloud owncloud/core before 10.10.0 Improperly Removes Sensitive Information Before Storage or Transfer...

CVE-2022-31649

ownCloud owncloud/core before 10.10.0 Improperly Removes Sensitive Information Before Storage or Transfer...

ownCloud 安全漏洞

ownCloud is a suite of personal cloud storage solutions from US-based ownCloud, Inc. A security vulnerability exists in versions of ownCloud prior to 10.10.0 that stems from incorrectly deleting sensitive information prior to storage or transmission...

PT-2022-20877 · Owncloud · Owncloud

Name of the Vulnerable Software and Affected Versions: ownCloud versions prior to 10.10.0 Description: The issue concerns the improper removal of sensitive information before storage or transfer. Recommendations: For versions prior to 10.10.0, update to version 10.10.0 or later to resolve the iss...

Information disclosure in settings UI and API responses - ownCloud

The settings page and some API responses of a few ownCloud apps contained plaintext credentials...

Security updates in Desktop Client - ownCloud

Even though there are no known vulnerabilities in the ownCloud desktop client we have updated the QT library which includes the zlib library. This is a preventive measure to make sure the client is not vlunerable to the remote code execution vulnerability in zlib...

GHSA-28RM-RJ57-QJPV PHPExcel vulnerable to XXE attacks through libxml

PHPExcel before 1.8.0, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, does not disable external entity loading in libxml, which allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity XXE attack...

PHPExcel vulnerable to XXE attacks through libxml

PHPExcel before 1.8.0, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, does not disable external entity loading in libxml, which allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity XXE attack...

XXE in SabreDAV

SabreDAV before 1.7.11, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity XXE attack...

GHSA-QM4X-CH5W-GR62 XXE in SabreDAV

SabreDAV before 1.7.11, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity XXE attack...

getID3 is vulnerable to XML External Entity (XXE)

getID3 before 1.9.9, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity XXE attack...

GHSA-5V43-55M5-QR8F getID3 is vulnerable to XML External Entity (XXE)

getID3 before 1.9.9, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity XXE attack...

GHSA-QG5V-JW6F-RPFJ SabreDAV Directory Traversal vulnerability

The HTML\Browser plugin in SabreDAV before 1.6.9, 1.7.x before 1.7.7, and 1.8.x before 1.8.5, as used in ownCloud, when running on Windows, does not properly check path separators in the base path, which allows remote attackers to read arbitrary files via a \ backslash character...