GCVE - cpe:2.3:a:owncloud:owncloud_server:4.0.10:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:owncloud:owncloud_server:4.0.10:*:*:*:*:*:*:*

part: a version: 4.0.10 update: *

Vendor	Owncloud (`7adb7c81-0e09-5084-ad84-9888a985e435`)
Product	Owncloud Server (`2291c676-bc20-574c-a431-505f3752afb3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/owncloud/core`	purl2cpe	2026-06-01 10:16:35.819579

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-2057`	vulnerable	2026-06-08 05:05:27.490567	Details available Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 6.0.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2014-03-23T15:00:00.000Z Updated: 2024-08-06T09:58:16.350Z Open on db.gcve.eu Reference links http://owncloud.org/about/security/advisories/oC-SA-2014-007/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2049`	vulnerable	2026-06-08 05:05:27.419812	Details available The default Flash Cross Domain policies in ownCloud before 5.0.15 and 6.x before 6.0.2 allows remote attackers to access user files via unspecified vectors. Published: 2014-03-14T16:00:00.000Z Updated: 2024-08-06T09:58:16.230Z Open on db.gcve.eu Reference links http://owncloud.org/about/security/advisories/oC-SA-2014-003/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2044`	vulnerable	2026-06-08 05:05:27.386277	Details available Incomplete blacklist vulnerability in ajax/upload.php in ownCloud before 5.0, when running on Windows, allows remote authenticated users to bypass intended access restrictions, upload files with arbitrary names, and execute arbitrary code via an Alternate Data Stream (ADS) syntax in the filename parameter, as demonstrated using .htaccess::$DATA to upload a PHP program. Published: 2014-10-06T23:00:00.000Z Updated: 2024-08-06T09:58:16.206Z Open on db.gcve.eu Reference links http://secunia.com/advisories/57267 http://www.osvdb.org/104082 http://www.securityfocus.com/bid/66000 http://seclists.org/fulldisclosure/2014/Mar/45 http://packetstormsecurity.com/files/125585/ownCloud-4.0.x-4.5.x-Remote-Code-Execution.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-7344`	vulnerable	2026-06-08 05:05:10.029572	Details available Unspecified vulnerability in core/settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via unknown vectors. NOTE: this issue was SPLIT from CVE-2013-0303 due to different affected versions. Published: 2014-03-23T15:00:00.000Z Updated: 2024-08-06T18:01:20.584Z Open on db.gcve.eu Reference links http://owncloud.org/about/security/advisories/oC-SA-2013-006/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2150`	vulnerable	2026-06-08 05:03:58.642789	Details available Multiple cross-site scripting (XSS) vulnerabilities in js/viewer.js in ownCloud before 4.5.12 and 5.x before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via vectors related to shared files. Published: 2014-03-14T16:00:00.000Z Updated: 2024-08-06T15:27:40.989Z Open on db.gcve.eu Reference links http://owncloud.org/about/security/advisories/oC-SA-2013-028/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2042`	vulnerable	2026-06-08 05:03:58.027604	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2040`	vulnerable	2026-06-08 05:03:58.025566	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2039`	vulnerable	2026-06-08 05:03:58.020994	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1942`	vulnerable	2026-06-08 05:03:57.423292	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1941`	vulnerable	2026-06-08 05:03:57.369809	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1851`	vulnerable	2026-06-08 05:03:56.803731	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1850`	vulnerable	2026-06-08 05:03:56.799863	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0307`	vulnerable	2026-06-08 05:03:46.937297	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0303`	vulnerable	2026-06-08 05:03:46.920657	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0302`	vulnerable	2026-06-08 05:03:46.919761	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0301`	vulnerable	2026-06-08 05:03:46.907663	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0299`	vulnerable	2026-06-08 05:03:46.906052	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0297`	vulnerable	2026-06-08 05:03:46.904249	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.