2432 matches found
CVE-2017-5865
The password reset functionality in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 sends different error messages depending on whether the username is valid, which allows remote attackers to enumerate user names via a large number of password reset...
CVE-2017-5866
The autocomplete feature in the E-Mail share dialog in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows remote authenticated users to obtain sensitive information via unspecified vectors...
CVE-2017-5866
The autocomplete feature in the E-Mail share dialog in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows remote authenticated users to obtain sensitive information via unspecified vectors...
CVE-2017-5865
The CVE-2017-5865 issue affects ownCloud Server’s password reset function prior to versions 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3. The root cause is that the reset flow returns different error messages depending on whether the username exists, enabling remote atta...
CVE-2017-5867
ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows remote authenticated users to cause a denial of service server hang and logfile flooding via a one bit BMP file...
CVE-2017-5865
The password reset functionality in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 sends different error messages depending on whether the username is valid, which allows remote attackers to enumerate user names via a large number of password reset...
CVE-2017-5866
The CVE-2017-5866 issue affects ownCloud Server, where the autocomplete in the E‑Mail share dialog could disclose sensitive information via unspecified vectors. Affected versions are: < 8.1.11, < 8.2.9, < 9.0.7, and
CVE-2017-5867
CVE-2017-5867 affects ownCloud Server prior to 8.1.11, 8.2.x prior to 8.2.9, 9.0.x prior to 9.0.7, and 9.1.x prior to 9.1.3. The issue allows remote authenticated users to cause a denial of service (server hang and logfile flooding) by uploading a one-bit BMP file. Connected documents confirm thi...
CVE-2017-5867
ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows remote authenticated users to cause a denial of service server hang and logfile flooding via a one bit BMP file...
PT-2017-16720
Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 8.1.11 ownCloud Server versions 8.2.x prior to 8.2.9 ownCloud Server versions 9.0.x prior to 9.0.7 ownCloud Server versions 9.1.x prior to 9.1.3 Description The issue allows remote authenticated users to cause...
CVE-2017-5865: Exposure of Sensitive Information to an Unauthorized Actor
The password reset functionality in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 sends different error messages depending on whether the username is valid, which allows remote attackers to enumerate user names via a large number of password reset...
CVE-2017-5866: Exposure of Sensitive Information to an Unauthorized Actor
The autocomplete feature in the E-Mail share dialog in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows remote authenticated users to obtain sensitive information via unspecified vectors...
PT-2017-16718
Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 8.1.11 ownCloud Server versions 8.2.x prior to 8.2.9 ownCloud Server versions 9.0.x prior to 9.0.7 ownCloud Server versions 9.1.x prior to 9.1.3 Description The password reset functionality in ownCloud Server...
PT-2017-16719
Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 8.1.11 ownCloud Server versions 8.2.x prior to 8.2.9 ownCloud Server versions 9.0.x prior to 9.0.7 ownCloud Server versions 9.1.x prior to 9.1.3 Description The issue allows remote authenticated users to obtai...
CVE-2017-5867: Uncontrolled Resource Consumption
ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows remote authenticated users to cause a denial of service server hang and logfile flooding via a one bit BMP file...
ownCloud Sensitive Information Disclosure Vulnerability
ownCloud is a free and open source personal cloud storage solution that offers file management, music storage, calendars and more. A security vulnerability exists in the ownCloud server that allows remote attackers to submit special requests to obtain sensitive information...
ownCloud server user enumeration vulnerability
ownCloud is a free and open source personal cloud storage solution that offers file management, music storage, calendars and more. A user enumeration vulnerability exists in the ownCloud server, which allows remote attackers to submit a special request to obtain a valid user name...
ownCloud Sensitive Information Disclosure Vulnerability (CNVD-2017-02732)
ownCloud is a free and open source personal cloud storage solution that offers file management, music storage, calendars and more. A security vulnerability exists in the ownCloud server that allows remote attackers to submit special requests to obtain sensitive information...
ownCloud: Outdated Jenkins server hosted at OwnCloud.org
Summary: The target OwnCloud's server is running an outdated version of Jenkins server which is vulnerable to various attacks. Server Location: https://ci.owncloud.org Vulnerable Software: Jenkins ver. 2.27 Proof of Exploitability CVE-2016-3727 POC URL:...