ownCloud Server (ownCloud Core) 5.0.14 A
Approved changes feed: RSS · Atom
cpe:2.3:a:owncloud:owncloud_server:5.0.14:a:*:*:*:*:*:*
part: a version: 5.0.14 update: a
| Vendor | Owncloud (7adb7c81-0e09-5084-ad84-9888a985e435) |
|---|---|
| Product | Owncloud Server (2291c676-bc20-574c-a431-505f3752afb3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/owncloud/core |
purl2cpe | 2026-06-01 10:16:35.819647 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-9048 |
vulnerable | 2026-06-08 05:06:10.727136 |
Details available
The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote attackers to bypass the password-protection for shared files via the API.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.629Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9047 |
vulnerable | 2026-06-08 05:06:10.725802 |
Details available
Multiple unspecified vulnerabilities in the preview system in ownCloud 6.x before 6.0.6 and 7.x before 7.0.3 allow remote attackers to read arbitrary files via unknown vectors.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.517Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9046 |
vulnerable | 2026-06-08 05:06:10.724455 |
Details available
The OC_Util::getUrlContent function in ownCloud Server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to read arbitrary files via a file:// protocol.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.561Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9045 |
vulnerable | 2026-06-08 05:06:10.723074 |
Details available
The FTP backend in user_external in ownCloud Server before 5.0.18 and 6.x before 6.0.6 allows remote attackers to bypass intended authentication requirements via a crafted password.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.531Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9043 |
vulnerable | 2026-06-08 05:06:10.720787 |
Details available
The user_ldap (aka LDAP user and group backend) application in ownCloud before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to bypass authentication via a null byte in the password and a valid user name, which triggers an unauthenticated bind.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.536Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9042 |
vulnerable | 2026-06-08 05:06:10.719346 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9041 |
vulnerable | 2026-06-08 05:06:10.711770 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4929 |
vulnerable | 2026-06-08 05:05:46.435855 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3838 |
vulnerable | 2026-06-08 05:05:43.013163 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3835 |
vulnerable | 2026-06-08 05:05:43.011405 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3833 |
vulnerable | 2026-06-08 05:05:43.009810 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2057 |
vulnerable | 2026-06-08 05:05:27.495956 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.