Approved changes feed: RSS · Atom

cpe:2.3:a:owncloud:owncloud_server:5.0.14:*:*:*:*:*:*:*

part: a version: 5.0.14 update: *

VendorOwncloud (7adb7c81-0e09-5084-ad84-9888a985e435)
ProductOwncloud Server (2291c676-bc20-574c-a431-505f3752afb3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/owncloud/core purl2cpe 2026-06-01 10:16:35.819645

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-9048 vulnerable 2026-06-08 05:06:10.727120 Details available
The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote attackers to bypass the password-protection for shared files via the API.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.629Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9047 vulnerable 2026-06-08 05:06:10.725788 Details available
Multiple unspecified vulnerabilities in the preview system in ownCloud 6.x before 6.0.6 and 7.x before 7.0.3 allow remote attackers to read arbitrary files via unknown vectors.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.517Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9046 vulnerable 2026-06-08 05:06:10.724439 Details available
The OC_Util::getUrlContent function in ownCloud Server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to read arbitrary files via a file:// protocol.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.561Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9045 vulnerable 2026-06-08 05:06:10.723058 Details available
The FTP backend in user_external in ownCloud Server before 5.0.18 and 6.x before 6.0.6 allows remote attackers to bypass intended authentication requirements via a crafted password.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.531Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9043 vulnerable 2026-06-08 05:06:10.720771 Details available
The user_ldap (aka LDAP user and group backend) application in ownCloud before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to bypass authentication via a null byte in the password and a valid user name, which triggers an unauthenticated bind.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.536Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9042 vulnerable 2026-06-08 05:06:10.719329 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9041 vulnerable 2026-06-08 05:06:10.711284 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4929 vulnerable 2026-06-08 05:05:46.435836 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3838 vulnerable 2026-06-08 05:05:43.013141 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3835 vulnerable 2026-06-08 05:05:43.011388 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3833 vulnerable 2026-06-08 05:05:43.009330 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2585 vulnerable 2026-06-08 05:05:29.282471 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2057 vulnerable 2026-06-08 05:05:27.491161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2056 vulnerable 2026-06-08 05:05:27.482188 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2055 vulnerable 2026-06-08 05:05:27.475288 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2054 vulnerable 2026-06-08 05:05:27.452015 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2053 vulnerable 2026-06-08 05:05:27.446534 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2051 vulnerable 2026-06-08 05:05:27.440016 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.