İçeriğe atla
Noroxi

ownCloud kayıtları

ownCloud üreticisine ait 169 yayımlanmış kayıt. Bunların 2 tanesi sahada sömürüldü (CISA KEV listesinde), 2 tanesi için hazır saldırı aracı var.

Ürüne göre süzün ↓

Araştırmacı profili

KEV’e giren
2 · %1,2
Silahlaştırılmış
2 · %1,2
Pre-auth RCE
5
Düzeltme kaydı olan
%11,8
Yayından KEV’e ortanca
510 gün

Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

169 kayıt
  • CVE-2023-49103
    83Hemen

    An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1.

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %77

    owncloud · graph api21 Kas 2023

  • CVE-2023-49105
    82Hemen

    An issue was discovered in ownCloud owncloud/core before 10.13.1.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %43

    owncloud · owncloud server21 Kas 2023

  • CVE-2015-4716
    47Planlayın

    Directory traversal vulnerability in the routing component in ownCloud Server before 7.0.6 and 8.0.x before 8.0.4, when running on Windows,

    KritikCVSS 10,0İstismar yokEPSS %24

    owncloud · owncloud21 Eki 2015

  • CVE-2014-2048
    40Planlayın

    The user_openid app in ownCloud Server before 5.0.15 allows remote attackers to obtain access by leveraging an insecure OpenID implementatio

    KritikCVSS 9,8İstismar yokEPSS %2

    owncloud · owncloud26 Mar 2018

  • CVE-2014-2052
    40Planlayın

    Zend Framework, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a de

    KritikCVSS 9,8İstismar yokEPSS %2

    owncloud · owncloud11 Şub 2020

  • CVE-2021-35946
    39İzleyin

    A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore ele

    KritikCVSS 9,8İstismar yokEPSS %1

    owncloud · owncloud7 Eyl 2021

  • CVE-2015-7699
    37İzleyin

    The files_external app in ownCloud Server before 7.0.9, 8.0.x before 8.0.7, and 8.1.x before 8.1.2 allows remote authenticated users to inst

    KritikCVSS 9,0İstismar yokEPSS %4

    owncloud · owncloud server26 Eki 2015

  • CVE-2015-4718
    37İzleyin

    The external SMB storage driver in ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0.x before 8.0.4 allows remote authenticated user

    KritikCVSS 9,0İstismar yokEPSS %3

    owncloud · owncloud21 Eki 2015

  • CVE-2015-7698
    37İzleyin

    icewind1991 SMB before 1.0.3 allows remote authenticated users to execute arbitrary SMB commands via shell metacharacters in the user argume

    KritikCVSS 9,0İstismar yokEPSS %2

    owncloud · smb21 Eki 2015

  • CVE-2020-28645
    36İzleyin

    Deleting users with certain names caused system files to be deleted.

    KritikCVSS 9,1İstismar yokEPSS %1

    owncloud · owncloud9 Şub 2021

  • CVE-2016-1499
    35İzleyin

    ownCloud Server before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allow remote authenticated users to obtain sensitive information f

    YüksekCVSS 8,5İstismar yokEPSS %3

    owncloud · owncloud8 Oca 2016

  • CVE-2021-33828
    35İzleyin

    The files_antivirus component before 1.0.0 for ownCloud mishandles the protection mechanism by which malicious files (that have been uploade

    YüksekCVSS 8,8İstismar yokEPSS %1

    owncloud · files antivirus15 Oca 2022

  • CVE-2014-2044
    34İzleyin

    Incomplete blacklist vulnerability in ajax/upload.php in ownCloud before 5.0, when running on Windows, allows remote authenticated users to

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    owncloud · owncloud6 Eki 2014

  • CVE-2016-9463
    33İzleyin

    Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.1.2, 9.0.6, and 8.2.9 suffer from SMB User Authentication Bypass.

    YüksekCVSS 8,1İstismar yokEPSS %4

    nextcloud · nextcloud server27 Mar 2017

  • CVE-2020-10252
    33İzleyin

    An issue was discovered in ownCloud before 10.4.

    YüksekCVSS 8,3İstismar yokEPSS %1

    owncloud · owncloud19 Şub 2021

  • CVE-2016-7102
    33İzleyin

    ownCloud Desktop before 2.2.3 allows local users to execute arbitrary code and possibly gain privileges via a Trojan library in a "special p

    YüksekCVSS 8,4İstismar yokEPSS %0

    owncloud · owncloud desktop client23 Oca 2017

  • CVE-2021-44537
    32İzleyin

    ownCloud owncloud/client before 2.9.2 allows Resource Injection by a server into the desktop client via a URL, leading to remote code execut

    YüksekCVSS 7,8İstismar yokEPSS %2

    owncloud · owncloud desktop client15 Oca 2022

  • CVE-2015-4717
    32İzleyin

    The filename sanitization component in ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0.x before 8.0.4 does not properly handle $_G

    YüksekCVSS 7,8İstismar yokEPSS %2

    owncloud · owncloud21 Eki 2015

  • CVE-2014-2053
    31İzleyin

    getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cau

    YüksekCVSS 7,5İstismar yokEPSS %4

    getid3 · getid34 Haz 2014

  • CVE-2012-4392
    31İzleyin

    index.php in ownCloud 4.0.7 does not properly validate the oc_token cookie, which allows remote attackers to bypass authentication via a cra

    YüksekCVSS 7,5İstismar yokEPSS %2

    owncloud · owncloud server5 Eyl 2012

  • CVE-2015-6500
    31İzleyin

    Directory traversal vulnerability in ownCloud Server before 8.0.6 and 8.1.x before 8.1.1 allows remote authenticated users to list directory

    YüksekCVSS 7,5İstismar yokEPSS %2

    owncloud · owncloud server26 Eki 2015

  • CVE-2014-2056
    31İzleyin

    PHPDocX, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of

    YüksekCVSS 7,5İstismar yokEPSS %2

    owncloud · owncloud server4 Haz 2014

  • CVE-2014-2055
    31İzleyin

    SabreDAV before 1.7.11, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, ca

    YüksekCVSS 7,5İstismar yokEPSS %2

    owncloud · owncloud server4 Haz 2014

  • CVE-2020-28646
    31İzleyin

    ownCloud owncloud/client before 2.7 allows DLL Injection.

    YüksekCVSS 7,8İstismar yokEPSS %0

    owncloud · owncloud desktop client26 Şub 2021

  • CVE-2014-2054
    30İzleyin

    PHPExcel before 1.8.0, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, does not disable external entity loading in libxml,

    YüksekCVSS 7,5İstismar yokEPSS %1

    owncloud · owncloud server4 Haz 2014