Approved changes feed: RSS · Atom

cpe:2.3:a:owncloud:owncloud:3.0.1:*:*:*:*:*:*:*

part: a version: 3.0.1 update: *

VendorOwncloud (7adb7c81-0e09-5084-ad84-9888a985e435)
ProductOwncloud (0271b5cd-a422-50b1-98fd-dfe8bea7189b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/owncloud/core purl2cpe 2026-06-01 10:16:35.423395
pkg:rpm/fedora/owncloud purl2cpe 2026-06-01 10:16:35.423396
pkg:rpm/opensuse/owncloud purl2cpe 2026-06-01 10:16:35.423397

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-2057 vulnerable 2026-06-08 05:05:27.482943 Details available
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 6.0.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2014-03-23T15:00:00.000Z
Updated: 2024-08-06T09:58:16.350Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2049 vulnerable 2026-06-08 05:05:27.406813 Details available
The default Flash Cross Domain policies in ownCloud before 5.0.15 and 6.x before 6.0.2 allows remote attackers to access user files via unspecified vectors.
Published: 2014-03-14T16:00:00.000Z
Updated: 2024-08-06T09:58:16.230Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2044 vulnerable 2026-06-08 05:05:27.360551 Details available
Incomplete blacklist vulnerability in ajax/upload.php in ownCloud before 5.0, when running on Windows, allows remote authenticated users to bypass intended access restrictions, upload files with arbitrary names, and execute arbitrary code via an Alternate Data Stream (ADS) syntax in the filename parameter, as demonstrated using .htaccess::$DATA to upload a PHP program.
Published: 2014-10-06T23:00:00.000Z
Updated: 2024-08-06T09:58:16.206Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7344 vulnerable 2026-06-08 05:05:10.006597 Details available
Unspecified vulnerability in core/settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via unknown vectors. NOTE: this issue was SPLIT from CVE-2013-0303 due to different affected versions.
Published: 2014-03-23T15:00:00.000Z
Updated: 2024-08-06T18:01:20.584Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2150 vulnerable 2026-06-08 05:03:58.637682 Details available
Multiple cross-site scripting (XSS) vulnerabilities in js/viewer.js in ownCloud before 4.5.12 and 5.x before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via vectors related to shared files.
Published: 2014-03-14T16:00:00.000Z
Updated: 2024-08-06T15:27:40.989Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1942 vulnerable 2026-06-08 05:03:57.415110 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1851 vulnerable 2026-06-08 05:03:56.803109 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1850 vulnerable 2026-06-08 05:03:56.788390 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0307 vulnerable 2026-06-08 05:03:46.936717 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0301 vulnerable 2026-06-08 05:03:46.907190 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0299 vulnerable 2026-06-08 05:03:46.905358 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0297 vulnerable 2026-06-08 05:03:46.895093 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5610 vulnerable 2026-06-08 05:02:57.498949 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5609 vulnerable 2026-06-08 05:02:57.493053 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5607 vulnerable 2026-06-08 05:02:57.486779 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5606 vulnerable 2026-06-08 05:02:57.480444 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4753 vulnerable 2026-06-08 05:02:52.581020 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4752 vulnerable 2026-06-08 05:02:52.572060 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4397 vulnerable 2026-06-08 05:02:17.268727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4396 vulnerable 2026-06-08 05:02:17.268201 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4395 vulnerable 2026-06-08 05:02:17.267543 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4394 vulnerable 2026-06-08 05:02:17.266941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4393 vulnerable 2026-06-08 05:02:17.266257 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4391 vulnerable 2026-06-08 05:02:17.259647 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4390 vulnerable 2026-06-08 05:02:17.258924 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4389 vulnerable 2026-06-08 05:02:17.247499 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2398 vulnerable 2026-06-08 05:02:04.147368 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2397 vulnerable 2026-06-08 05:02:04.146890 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2270 vulnerable 2026-06-08 05:02:03.080435 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2269 vulnerable 2026-06-08 05:02:03.078267 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.