Lucene search
+L

1964 matches found

OpenVAS
OpenVAS
added 2021/09/21 12:00 a.m.39 views

ownCloud < 5.0.15, 6.0.x < 6.0.2 Multiple Vulnerabilities

ownCloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; ifdescription...

9.8CVSS7.4AI score0.02462EPSS
SaveExploits0References2
OSV
OSV
added 2021/09/08 6:15 p.m.37 views

CVE-2021-40537

Server Side Request Forgery SSRF vulnerability exists in owncloud/userldap 0.15.4 in the settings of the userldap app. Administration role is necessary for exploitation...

2.7CVSS6.8AI score
SaveExploits0References1
NVD
NVD
added 2021/09/08 6:15 p.m.42 views

CVE-2021-40537

Server Side Request Forgery SSRF vulnerability exists in owncloud/userldap 0.15.4 in the settings of the userldap app. Administration role is necessary for exploitation...

4CVSS0.00692EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/09/08 6:15 p.m.8 views

CVE-2021-40537

Server Side Request Forgery SSRF vulnerability exists in owncloud/userldap 0.15.4 in the settings of the userldap app. Administration role is necessary for exploitation...

4CVSS5.8AI score0.00692EPSS
SaveExploits0References2
Prion
Prion
added 2021/09/08 6:15 p.m.27 views

Server side request forgery (ssrf)

Server Side Request Forgery SSRF vulnerability exists in owncloud/userldap 0.15.4 in the settings of the userldap app. Administration role is necessary for exploitation...

4CVSS3.8AI score0.00692EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2021/09/08 6:15 p.m.78 views

CVE-2021-40537

Server Side Request Forgery SSRF vulnerability exists in owncloud/userldap 0.15.4 in the settings of the userldap app. Administration role is necessary for exploitation...

4CVSS5.9AI score0.00692EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/09/08 5:26 p.m.52 views

CVE-2021-40537

Server Side Request Forgery SSRF vulnerability exists in owncloud/userldap 0.15.4 in the settings of the userldap app. Administration role is necessary for exploitation...

4AI score0.00692EPSS
SaveExploits0References1
CVE
CVE
added 2021/09/08 5:26 p.m.77 views

CVE-2021-40537

CVE-2021-40537 concerns a Server Side Request Forgery (SSRF) in the owncloud/user_ldap extension prior to version 0.15.4. The vulnerability stems from the user_ldap app settings and is exploitable only by users with Administration privileges. Affected component: ownCloud with the user_ldap app; r...

4CVSS3.8AI score0.00692EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/09/08 12:00 a.m.13 views

owncloud 代码问题漏洞

Owncloud ownCloud is a personal cloud storage solution from the American company ownCloud Owncloud. A code issue vulnerability exists in owncloud that arises from improper design or implementation during code development of a networked system or product...

4CVSS5AI score0.00692EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/09/08 12:00 a.m.33 views

ownCloud < 5.0 RCE Vulnerability - Windows

ownCloud is prone to an remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS7.5AI score0.12388EPSS
SaveExploits7References2
OwnCloud
OwnCloud
added 2021/09/08 12:00 a.m.58 views

Server Side Request Forgery (SSRF) through user_ldap app - ownCloud

Server Side Request Forgery SSRF vulnerability in the settings of the userldap app. Administration role is necessary for exploitation...

4.1CVSS3.1AI score0.00692EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2021/09/07 8:15 p.m.29 views

CVE-2021-35948

Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when they can force a target client to use a controlled cookie...

5.4CVSS6.9AI score
SaveExploits0References2
NVD
NVD
added 2021/09/07 8:15 p.m.28 views

CVE-2021-35946

A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore elevate their own permissions...

9.8CVSS0.01482EPSS
SaveExploits0References2
NVD
NVD
added 2021/09/07 8:15 p.m.35 views

CVE-2021-35948

Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when they can force a target client to use a controlled cookie...

5.8CVSS0.00693EPSS
SaveExploits0References2
OSV
OSV
added 2021/09/07 8:15 p.m.29 views

CVE-2021-35946

A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore elevate their own permissions...

9.8CVSS6.8AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/09/07 8:15 p.m.6 views

CVE-2021-35948

Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when they can force a target client to use a controlled cookie...

5.8CVSS6.1AI score0.00693EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2021/09/07 8:15 p.m.56 views

CVE-2021-35948

Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when they can force a target client to use a controlled cookie...

5.8CVSS6.1AI score0.00693EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/09/07 8:15 p.m.6 views

CVE-2021-35946

A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore elevate their own permissions...

9.8CVSS7.2AI score0.01482EPSS
SaveExploits0References3
Prion
Prion
added 2021/09/07 8:15 p.m.24 views

Design/Logic Flaw

A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore elevate their own permissions...

7.5CVSS9.3AI score0.01482EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2021/09/07 8:15 p.m.51 views

CVE-2021-35946

A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore elevate their own permissions...

9.8CVSS7.2AI score0.01482EPSS
SaveExploits0References3
Rows per page
Query Builder