Approved changes feed: RSS · Atom

cpe:2.3:a:owncloud:owncloud_server:5.0.8:*:*:*:*:*:*:*

part: a version: 5.0.8 update: *

VendorOwncloud (7adb7c81-0e09-5084-ad84-9888a985e435)
ProductOwncloud Server (2291c676-bc20-574c-a431-505f3752afb3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/owncloud/core purl2cpe 2026-06-01 10:16:35.819668

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-9048 vulnerable 2026-06-08 05:06:10.727024 Details available
The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote attackers to bypass the password-protection for shared files via the API.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.629Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9047 vulnerable 2026-06-08 05:06:10.725691 Details available
Multiple unspecified vulnerabilities in the preview system in ownCloud 6.x before 6.0.6 and 7.x before 7.0.3 allow remote attackers to read arbitrary files via unknown vectors.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.517Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9046 vulnerable 2026-06-08 05:06:10.724339 Details available
The OC_Util::getUrlContent function in ownCloud Server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to read arbitrary files via a file:// protocol.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.561Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9045 vulnerable 2026-06-08 05:06:10.722959 Details available
The FTP backend in user_external in ownCloud Server before 5.0.18 and 6.x before 6.0.6 allows remote attackers to bypass intended authentication requirements via a crafted password.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.531Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9043 vulnerable 2026-06-08 05:06:10.720677 Details available
The user_ldap (aka LDAP user and group backend) application in ownCloud before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to bypass authentication via a null byte in the password and a valid user name, which triggers an unauthenticated bind.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.536Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9042 vulnerable 2026-06-08 05:06:10.719230 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9041 vulnerable 2026-06-08 05:06:10.708265 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4929 vulnerable 2026-06-08 05:05:46.435731 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3838 vulnerable 2026-06-08 05:05:43.013044 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3835 vulnerable 2026-06-08 05:05:43.011285 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3833 vulnerable 2026-06-08 05:05:43.006329 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2585 vulnerable 2026-06-08 05:05:29.282364 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2057 vulnerable 2026-06-08 05:05:27.491060 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2056 vulnerable 2026-06-08 05:05:27.482084 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2055 vulnerable 2026-06-08 05:05:27.475190 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2054 vulnerable 2026-06-08 05:05:27.451915 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2053 vulnerable 2026-06-08 05:05:27.446429 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2051 vulnerable 2026-06-08 05:05:27.438207 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2049 vulnerable 2026-06-08 05:05:27.428954 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6403 vulnerable 2026-06-08 05:04:56.516456 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.