Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Guests
MEDIUM 5.3
ownCloud Guests before 0.12.5 allows unauthenticated user enumeration via the /apps/guests/register/{email}/{token} endpoint. Because of insufficient…
Owncloud Server
CRITICAL 9.8
An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file without authentication if the us…
Graph Api
HIGH 7.5
An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.…
Oauth2
MEDIUM 6.1
An issue was discovered in ownCloud owncloud/oauth2 before 0.6.1, when Allow Subdomains is enabled. An attacker is able to pass in a crafted redirect…
Owncloud Client
MEDIUM 5.5
The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Version 2.21.1 of the ownCloud Android app is vulnerable…
Owncloud
MEDIUM 5.3
The Docker image of ownCloud Server through 10.11 contains a misconfiguration that renders the trusted_domains config useless. This could be abused t…
Owncloud
HIGH 7.5
ownCloud owncloud/core before 10.10.0 Improperly Removes Sensitive Information Before Storage or Transfer.
Owncloud Client
MEDIUM 5.5
ownCloud owncloud/android 2.20 has Incorrect Access Control for local attackers.
Owncloud Client
MEDIUM 6.8
ownCloud owncloud/android before 2.20 has Incorrect Access Control for physically proximate attackers.
Owncloud Desktop Client
HIGH 7.8
ownCloud owncloud/client before 2.9.2 allows Resource Injection by a server into the desktop client via a URL, leading to remote code execution.
Files Antivirus
HIGH 8.8
The files_antivirus component before 1.0.0 for ownCloud mishandles the protection mechanism by which malicious files (that have been uploaded to a pu…
Files Antivirus
HIGH 7.2
The files_antivirus component before 1.0.0 for ownCloud allows OS Command Injection via the administration settings.
Owncloud
CRITICAL 9.8
A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore elevate thei…
Owncloud
MEDIUM 5.4
Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when th…
Owncloud
MEDIUM 5.3
The public share controller in the ownCloud server before version 10.8.0 allows a remote attacker to see the internal path and the username of a publ…
Owncloud
MEDIUM 5.3
The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upload only shares and list meta…
Owncloud Server
MEDIUM 6.5
ownCloud 10.7 has an incorrect access control vulnerability, leading to remote information disclosure. Due to a bug in the related API endpoint, the …
Owncloud Desktop Client
HIGH 7.8
ownCloud owncloud/client before 2.7 allows DLL Injection. The desktop client loaded development plugins from certain directories when they were prese…
Owncloud
HIGH 8.3
An issue was discovered in ownCloud before 10.4. Because of an SSRF issue (via the apps/files_sharing/external remote parameter), an authenticated at…
File Firewall
HIGH 7.5
The File Firewall before 2.8.0 for ownCloud Server does not properly enforce file-type restrictions for public shares.
Owncloud
MEDIUM 5.9
An issue was discovered in ownCloud before 10.4. An attacker can bypass authentication on a password-protected image by displaying its preview.
Owncloud Server
MEDIUM 5.7
ownCloud Server 10.x before 10.3.1 allows an attacker, who has one outgoing share from a victim, to access any version of any file by sending a reque…
Owncloud
CRITICAL 9.1
Deleting users with certain names caused system files to be deleted. Risk is higher for systems which allow users to register themselves and have the…
Files Antivirus
MEDIUM 5.7
When using an object storage like S3 as the file store, when a user creates a public link to a folder where anonymous users can upload files, and ano…
Owncloud
MEDIUM 6.1
ownCloud (Core) before 10.5 allows XSS in login page 'forgot password.'
Owncloud
CRITICAL 9.8
Zend Framework, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of s…
Owncloud
MEDIUM 6.5
Cross-site request forgery (CSRF) vulnerability in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote attackers to hijack the authent…
Owncloud Server
MEDIUM 6.1
Cross-site scripting (XSS) vulnerability in ownCloud 4.5.5, 4.0.10, and earlier allows remote attackers to inject arbitrary web script or HTML via th…
Owncloud
MEDIUM 5.4
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to inject arbitrary web script or H…
Owncloud
CRITICAL 9.8
The user_openid app in ownCloud Server before 5.0.15 allows remote attackers to obtain access by leveraging an insecure OpenID implementation.