CVE-2021-33827

The filesantivirus component before 1.0.0 for ownCloud allows OS Command Injection via the administration settings...

Command injection

The filesantivirus component before 1.0.0 for ownCloud allows OS Command Injection via the administration settings...

CVE-2021-44537

ownCloud owncloud/client before 2.9.2 allows Resource Injection by a server into the desktop client via a URL, leading to remote code execution...

CVE-2021-33828

The filesantivirus component before 1.0.0 for ownCloud mishandles the protection mechanism by which malicious files that have been uploaded to a public share are supposed to be deleted upon detection...

CVE-2021-33827

The filesantivirus component before 1.0.0 for ownCloud allows OS Command Injection via the administration settings...

Design/Logic Flaw

The filesantivirus component before 1.0.0 for ownCloud mishandles the protection mechanism by which malicious files that have been uploaded to a public share are supposed to be deleted upon detection...

Remote code execution

ownCloud owncloud/client before 2.9.2 allows Resource Injection by a server into the desktop client via a URL, leading to remote code execution...

CVE-2021-33827

The CVE-2021-33827 entry concerns the files_antivirus component for ownCloud (before 1.0.0) and describes an OS command injection vulnerability via the administration settings. Multiple connected documents corroborate this issue, stating that remote code execution is possible through admin-config...

CVE-2021-33827

The filesantivirus component before 1.0.0 for ownCloud allows OS Command Injection via the administration settings...

CVE-2021-33828

The CVE-2021-33828 issue affects the ownCloud files_antivirus component prior to 1.0.0. The root problem is mishandling the deletion protection mechanism for malicious files uploaded to a public share; although these files are detected, they were not deleted as intended. Connected records (Red Ha...

CVE-2021-33828

The filesantivirus component before 1.0.0 for ownCloud mishandles the protection mechanism by which malicious files that have been uploaded to a public share are supposed to be deleted upon detection...

CVE-2021-44537

ownCloud owncloud/client before 2.9.2 allows Resource Injection by a server into the desktop client via a URL, leading to remote code execution...

CVE-2021-44537

CVE-2021-44537 affects the ownCloud desktop client before 2.9.2. The issue stems from a server-controlled URL that can inject resources into the client, enabling remote code execution. The vulnerability enables a remote attacker to trigger code execution with no user privileges required and persi...

CVE-2021-44537

ownCloud owncloud/client before 2.9.2 allows Resource Injection by a server into the desktop client via a URL, leading to remote code execution...

PT-2022-12158 · Owncloud · Owncloud

Name of the Vulnerable Software and Affected Versions: ownCloud versions prior to 2.9.2 Description: The issue allows Resource Injection by a server into the desktop client via a URL, leading to remote code execution. Recommendations: For versions prior to 2.9.2, update to version 2.9.2 or later ...

Owncloud 注入漏洞

Owncloud ownCloud is a personal cloud storage solution from the US-based company ownCloud Owncloud. A security vulnerability exists in Owncloud ownCloud that allows the server to inject resources into a desktop client via a URL, which can lead to remote code execution...

Missing URL validation allowed RCE on the desktop client - ownCloud

A malicious server could achieve remote code execution on the desktop client because of missing validation of URLs. Exploitation required user interaction...

ownCloud Insecure Direct Object Reference Vulnerability (oC-SA-2016-010)

ownCloud is prone to an insecure direct object reference vulnerability in the Gallery app. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

ownCloud < 4.0.2 Multiple XSS Vulnerabilities

ownCloud is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ownCloud < 4.0.7 Multiple Vulnerabilities (oC-SA-2012-012, oC-SA-2012-013, oC-SA-2012-014, oC-SA-2012-015)

ownCloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; ifdescription...