Approved changes feed: RSS · Atom

cpe:2.3:a:owncloud:owncloud:5.0.3:*:*:*:*:*:*:*

part: a version: 5.0.3 update: *

VendorOwncloud (7adb7c81-0e09-5084-ad84-9888a985e435)
ProductOwncloud (0271b5cd-a422-50b1-98fd-dfe8bea7189b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/owncloud/core purl2cpe 2026-06-01 10:16:35.423602
pkg:rpm/fedora/owncloud purl2cpe 2026-06-01 10:16:35.423603
pkg:rpm/opensuse/owncloud purl2cpe 2026-06-01 10:16:35.423605

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-9048 vulnerable 2026-06-08 05:06:10.726455 Details available
The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote attackers to bypass the password-protection for shared files via the API.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.629Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9047 vulnerable 2026-06-08 05:06:10.725178 Details available
Multiple unspecified vulnerabilities in the preview system in ownCloud 6.x before 6.0.6 and 7.x before 7.0.3 allow remote attackers to read arbitrary files via unknown vectors.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.517Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9046 vulnerable 2026-06-08 05:06:10.723816 Details available
The OC_Util::getUrlContent function in ownCloud Server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to read arbitrary files via a file:// protocol.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.561Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9045 vulnerable 2026-06-08 05:06:10.722311 Details available
The FTP backend in user_external in ownCloud Server before 5.0.18 and 6.x before 6.0.6 allows remote attackers to bypass intended authentication requirements via a crafted password.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.531Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9043 vulnerable 2026-06-08 05:06:10.720028 Details available
The user_ldap (aka LDAP user and group backend) application in ownCloud before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to bypass authentication via a null byte in the password and a valid user name, which triggers an unauthenticated bind.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.536Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9042 vulnerable 2026-06-08 05:06:10.718684 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9041 vulnerable 2026-06-08 05:06:10.691136 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4929 vulnerable 2026-06-08 05:05:46.432095 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3838 vulnerable 2026-06-08 05:05:43.012641 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3835 vulnerable 2026-06-08 05:05:43.010866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3833 vulnerable 2026-06-08 05:05:42.995471 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2585 vulnerable 2026-06-08 05:05:29.281950 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2057 vulnerable 2026-06-08 05:05:27.483571 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2056 vulnerable 2026-06-08 05:05:27.475951 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2055 vulnerable 2026-06-08 05:05:27.474792 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2054 vulnerable 2026-06-08 05:05:27.451526 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2053 vulnerable 2026-06-08 05:05:27.446027 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2051 vulnerable 2026-06-08 05:05:27.435116 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2049 vulnerable 2026-06-08 05:05:27.413123 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6403 vulnerable 2026-06-08 05:04:56.506092 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2150 vulnerable 2026-06-08 05:03:58.632793 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2089 vulnerable 2026-06-08 05:03:58.306670 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2086 vulnerable 2026-06-08 05:03:58.289942 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2048 vulnerable 2026-06-08 05:03:58.031776 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2047 vulnerable 2026-06-08 05:03:58.031335 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2046 vulnerable 2026-06-08 05:03:58.030490 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2045 vulnerable 2026-06-08 05:03:58.029770 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2044 vulnerable 2026-06-08 05:03:58.029288 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2043 vulnerable 2026-06-08 05:03:58.028518 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2042 vulnerable 2026-06-08 05:03:58.027394 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2041 vulnerable 2026-06-08 05:03:58.026363 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2040 vulnerable 2026-06-08 05:03:58.025347 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2039 vulnerable 2026-06-08 05:03:58.016728 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1967 vulnerable 2026-06-08 05:03:57.645311 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1963 vulnerable 2026-06-08 05:03:57.598517 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1941 vulnerable 2026-06-08 05:03:57.369576 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.