Approved changes feed: RSS · Atom

cpe:2.3:a:owncloud:owncloud:4.5.5:*:*:*:*:*:*:*

part: a version: 4.5.5 update: *

VendorOwncloud (7adb7c81-0e09-5084-ad84-9888a985e435)
ProductOwncloud (0271b5cd-a422-50b1-98fd-dfe8bea7189b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/owncloud/core purl2cpe 2026-06-01 10:16:35.423527
pkg:rpm/fedora/owncloud purl2cpe 2026-06-01 10:16:35.423529
pkg:rpm/opensuse/owncloud purl2cpe 2026-06-01 10:16:35.423530

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-2057 vulnerable 2026-06-08 05:05:27.483373 Details available
Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 6.0.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2014-03-23T15:00:00.000Z
Updated: 2024-08-06T09:58:16.350Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2049 vulnerable 2026-06-08 05:05:27.407259 Details available
The default Flash Cross Domain policies in ownCloud before 5.0.15 and 6.x before 6.0.2 allows remote attackers to access user files via unspecified vectors.
Published: 2014-03-14T16:00:00.000Z
Updated: 2024-08-06T09:58:16.230Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2044 vulnerable 2026-06-08 05:05:27.373687 Details available
Incomplete blacklist vulnerability in ajax/upload.php in ownCloud before 5.0, when running on Windows, allows remote authenticated users to bypass intended access restrictions, upload files with arbitrary names, and execute arbitrary code via an Alternate Data Stream (ADS) syntax in the filename parameter, as demonstrated using .htaccess::$DATA to upload a PHP program.
Published: 2014-10-06T23:00:00.000Z
Updated: 2024-08-06T09:58:16.206Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7344 vulnerable 2026-06-08 05:05:10.017362 Details available
Unspecified vulnerability in core/settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via unknown vectors. NOTE: this issue was SPLIT from CVE-2013-0303 due to different affected versions.
Published: 2014-03-23T15:00:00.000Z
Updated: 2024-08-06T18:01:20.584Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2150 vulnerable 2026-06-08 05:03:58.638118 Details available
Multiple cross-site scripting (XSS) vulnerabilities in js/viewer.js in ownCloud before 4.5.12 and 5.x before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via vectors related to shared files.
Published: 2014-03-14T16:00:00.000Z
Updated: 2024-08-06T15:27:40.989Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2046 vulnerable 2026-06-08 05:03:58.030351 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2043 vulnerable 2026-06-08 05:03:58.028342 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2042 vulnerable 2026-06-08 05:03:58.027255 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2040 vulnerable 2026-06-08 05:03:58.025199 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2039 vulnerable 2026-06-08 05:03:58.016581 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1967 vulnerable 2026-06-08 05:03:57.645173 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1963 vulnerable 2026-06-08 05:03:57.598399 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1942 vulnerable 2026-06-08 05:03:57.419531 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1941 vulnerable 2026-06-08 05:03:57.366175 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1851 vulnerable 2026-06-08 05:03:56.803452 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1850 vulnerable 2026-06-08 05:03:56.788302 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1822 vulnerable 2026-06-08 05:03:56.601261 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0307 vulnerable 2026-06-08 05:03:46.937036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0304 vulnerable 2026-06-08 05:03:46.921191 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0303 vulnerable 2026-06-08 05:03:46.920482 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0300 vulnerable 2026-06-08 05:03:46.906668 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0299 vulnerable 2026-06-08 05:03:46.905784 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0298 vulnerable 2026-06-08 05:03:46.904757 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0297 vulnerable 2026-06-08 05:03:46.891937 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0204 vulnerable 2026-06-08 05:03:45.814167 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0201 vulnerable 2026-06-08 05:03:45.801899 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.