Lucene search
+L

1947 matches found

CNVD
CNVD
added 2016/11/09 12:0 a.m.2 views

OwnCloud/NextCloud Cross-Site Scripting Vulnerability

OwnCloud is a free and open source personal cloud storage solution from OwnCloud Germany.Nextcloud is an open source self-hosted file synchronization and sharing communication application platform.OwnCloud Server and Nextcloud Server are both a server version of one of them. A cross-site scriptin...

6.4AI score
SaveExploits0References1
Packet Storm
Packet Storm
added 2016/11/07 12:0 a.m.29 views

ownCloud 10.0.1 Cross Site Scripting

Dear Community By comparing the advisory of NextCloud and OwnCloud I figured out that OwnCloud has multiple not patched vulnerabilities. You can see list here it seems all patches missing from latest Nextcloud 10.0.1 release in OwnCloud: https://nextcloud.com/security/advisories. This seems to...

7.4AI score
SaveExploits0
OpenVAS
OpenVAS
added 2016/09/26 12:0 a.m.20 views

ownCloud 'share.js' Gallery Application XSS Vulnerability - Linux

ownCloud is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"...

5.4CVSS5.4AI score0.01373EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2016/09/26 12:0 a.m.22 views

ownCloud 'share.js' Gallery Application XSS Vulnerability - Windows

ownCloud is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"...

5.4CVSS5.4AI score0.01373EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2016/09/23 12:0 a.m.23 views

ownCloud Multiple Vulnerabilities (Sep 2016) - Linux

ownCloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; ifdescription...

9CVSS5.1AI score0.03043EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2016/09/23 12:0 a.m.32 views

ownCloud Local File Inclusion Vulnerability (Sep 2016) - Windows

ownCloud is prone to local file inclusion vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud";...

10CVSS6.2AI score0.2482EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2016/09/23 12:0 a.m.20 views

ownCloud Access Bypass Vulnerability (Sep 2016) - Windows

ownCloud is prone to an access bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud";...

4CVSS6.4AI score0.01201EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2016/09/23 12:0 a.m.16 views

ownCloud Information Exposure Vulnerability (Sep 2016) - Linux

ownCloud is prone to an information exposure vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud";...

7.5CVSS6.5AI score0.02627EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2016/09/23 12:0 a.m.21 views

ownCloud Multiple Vulnerabilities (Sep 2016) - Windows

ownCloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; ifdescription...

9CVSS5.1AI score0.03043EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2016/09/23 12:0 a.m.39 views

ownCloud Authorization Bypass Vulnerability (Sep 2016) - Linux

ownCloud is prone to authorization bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud";...

4CVSS6.3AI score0.01417EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2016/09/23 12:0 a.m.23 views

ownCloud Information Exposure Vulnerability (Sep 2016) - Windows

ownCloud is prone to an information exposure vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud";...

7.5CVSS6.5AI score0.02627EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2016/09/23 12:0 a.m.20 views

ownCloud Access Bypass Vulnerability (Sep 2016) - Linux

ownCloud is prone to an access bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud";...

4CVSS6.4AI score0.01201EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2016/09/23 12:0 a.m.20 views

ownCloud Authorization Bypass Vulnerability (Sep 2016) - Windows

ownCloud is prone to authorization bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud";...

4CVSS6.3AI score0.01417EPSS
SaveExploits0References2
Hacker One
Hacker One
added 2016/09/22 7:51 p.m.18 views

ownCloud: Accessable Htaccess

Hello Team , Request: if u think the reported issues have an Acceptable risk and u r not going to make changes then kindly request to mark as Informative . Reference:- 8061 , 7813 , 163106 POC URL:- https://demo.owncloud.org/.htaccess Regard's Santhosh...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2016/09/19 12:0 a.m.8 views

OwnCloud Server and Nextcloud Server Cross-Site Scripting Vulnerabilities

OwnCloud is a free and open source personal cloud storage solution from OwnCloud Germany.Nextcloud is an open source self-hosted file synchronization and sharing communication application platform.OwnCloud Server and Nextcloud Server are both a server version of one of them. A cross-site scriptin...

5.4CVSS6AI score0.01373EPSS
SaveExploits1References1
NVD
NVD
added 2016/09/17 9:59 p.m.24 views

CVE-2016-7419

Cross-site scripting XSS vulnerability in share.js in the gallery application in ownCloud Server before 9.0.4 and Nextcloud Server before 9.0.52 allows remote authenticated users to inject arbitrary web script or HTML via a crafted directory name...

5.4CVSS5.1AI score0.01373EPSS
SaveExploits1References5
OSV
OSV
added 2016/09/17 9:59 p.m.10 views

CVE-2016-7419

Cross-site scripting XSS vulnerability in share.js in the gallery application in ownCloud Server before 9.0.4 and Nextcloud Server before 9.0.52 allows remote authenticated users to inject arbitrary web script or HTML via a crafted directory name...

5.4CVSS5.2AI score
SaveExploits0References5
Prion
Prion
added 2016/09/17 9:59 p.m.19 views

Cross site scripting

Cross-site scripting XSS vulnerability in share.js in the gallery application in ownCloud Server before 9.0.4 and Nextcloud Server before 9.0.52 allows remote authenticated users to inject arbitrary web script or HTML via a crafted directory name...

3.5CVSS5.5AI score0.01373EPSS
SaveExploits1References5Affected Software2
Cvelist
Cvelist
added 2016/09/17 9:0 p.m.33 views

CVE-2016-7419

Cross-site scripting XSS vulnerability in share.js in the gallery application in ownCloud Server before 9.0.4 and Nextcloud Server before 9.0.52 allows remote authenticated users to inject arbitrary web script or HTML via a crafted directory name...

5.2AI score0.01373EPSS
SaveExploits1References5
CVE
CVE
added 2016/09/17 9:0 p.m.62 views

CVE-2016-7419

Affected software and scope: CVE-2016-7419 is an XSS vulnerability in the share.js file of the gallery application used by ownCloud Server < 9.0.4 and Nextcloud Server

5.4CVSS5.1AI score0.01373EPSS
SaveExploits1References5Affected Software2
Rows per page
Query Builder