Most severe vulnerabilities for "owncloud owncloud" 4.0.12

Where

AND

Sort:

ownCloud ownCloudCode Injection

Risk 46

Severity

6.5

Code Injection

AV:N/AC:L/Au:S/C:P/I:P/A:P

Multiple incomplete blacklist vulnerabilities in (1) import.php and (2) ajax/uploadimport.php in apps/contacts/ in ownCloud before 4.0.13 and 4.5.x before 4.5.8 allow remote authenticated users to execute arbitrary PHP code by uploading a .htaccess file.

First published (updated )

CVE-2013-1850

ownCloud ownCloudThe default Flash Cross Domain policies in ownCloud before 5.0.15 and 6.x before 6.0.2 allows remote…

Risk 26

Severity

AV:N/AC:L/Au:N/C:P/I:N/A:N

The default Flash Cross Domain policies in ownCloud before 5.0.15 and 6.x before 6.0.2 allows remote attackers to access user files via unspecified vectors.

First published (updated )

CVE-2014-2049

ownCloud ownCloudThe installation routine in ownCloud Server before 4.0.14, 4.5.x before 4.5.9, and 5.0.x before 5.0.…

Risk 26

Severity

AV:N/AC:L/Au:N/C:N/I:P/A:N

The installation routine in ownCloud Server before 4.0.14, 4.5.x before 4.5.9, and 5.0.x before 5.0.4 uses the time function to seed the generation of the PostgreSQL database user password, which makes it easier for remote attackers to guess the password via a brute force attack.

First published (updated )

CVE-2013-1941

ownCloud ownCloudXSS

Risk 22

Severity

4.3

XSS

AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 6.0.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

First published (updated )

CVE-2014-2057

ownCloud ownCloudPath Traversal

Risk 21

Severity

Path Traversal

AV:N/AC:L/Au:S/C:P/I:N/A:N

Directory traversal vulnerability in lib/files/view.php in ownCloud before 4.0.15, 4.5.x 4.5.11, and 5.x before 5.0.6 allows remote authenticated users to access arbitrary files via unspecified vectors.

First published (updated )

CVE-2013-2039

ownCloud ownCloudXSS

Risk 18

Severity

3.5

XSS

AV:N/AC:M/Au:S/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in js/viewer.js in ownCloud before 4.5.12 and 5.x before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via vectors related to shared files.

First published (updated )

CVE-2013-2150

ownCloud ownCloudXSS

Risk 18

Severity

3.5

XSS

AV:N/AC:M/Au:S/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5.11, and 5.0.x before 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via the url parameter to (1) apps/bookmarks/ajax/addBookmark.php or (2) apps/bookmarks/ajax/editBookmark.php.

First published (updated )

CVE-2013-2042

ownCloud ownCloudIncomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.13 and 4.5.x before 4.5…

Risk 18

Severity

3.5

AV:N/AC:M/Au:S/C:N/I:P/A:N

Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.13 and 4.5.x before 4.5.8, when the usermigrate application is enabled, allows remote authenticated users to import arbitrary files to the user's account via unspecified vectors.

First published (updated )

CVE-2013-1851

ownCloud ownCloudXSS

Risk 18

Severity

3.5

XSS

AV:N/AC:M/Au:S/C:N/I:P/A:N

First published (updated )

CVE-2013-2040

Trending

ownCloud ownCloudCode Injection

ownCloud ownCloudThe default Flash Cross Domain policies in ownCloud before 5.0.15 and 6.x before 6.0.2 allows remote…

ownCloud ownCloudThe installation routine in ownCloud Server before 4.0.14, 4.5.x before 4.5.9, and 5.0.x before 5.0.…

ownCloud ownCloudXSS

ownCloud ownCloudPath Traversal

ownCloud ownCloudXSS

ownCloud ownCloudXSS

ownCloud ownCloudIncomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.13 and 4.5.x before 4.5…

ownCloud ownCloudXSS

Company

Resources

Contact