Approved changes feed: RSS · Atom

cpe:2.3:a:owncloud:owncloud:5.0.4:*:*:*:*:*:*:*

part: a version: 5.0.4 update: *

VendorOwncloud (7adb7c81-0e09-5084-ad84-9888a985e435)
ProductOwncloud (0271b5cd-a422-50b1-98fd-dfe8bea7189b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/owncloud/core purl2cpe 2026-06-01 10:16:35.423606
pkg:rpm/fedora/owncloud purl2cpe 2026-06-01 10:16:35.423607
pkg:rpm/opensuse/owncloud purl2cpe 2026-06-01 10:16:35.423609

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-9048 vulnerable 2026-06-08 05:06:10.726472 Details available
The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote attackers to bypass the password-protection for shared files via the API.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.629Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9047 vulnerable 2026-06-08 05:06:10.725194 Details available
Multiple unspecified vulnerabilities in the preview system in ownCloud 6.x before 6.0.6 and 7.x before 7.0.3 allow remote attackers to read arbitrary files via unknown vectors.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.517Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9046 vulnerable 2026-06-08 05:06:10.723833 Details available
The OC_Util::getUrlContent function in ownCloud Server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to read arbitrary files via a file:// protocol.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.561Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9045 vulnerable 2026-06-08 05:06:10.722328 Details available
The FTP backend in user_external in ownCloud Server before 5.0.18 and 6.x before 6.0.6 allows remote attackers to bypass intended authentication requirements via a crafted password.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.531Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9043 vulnerable 2026-06-08 05:06:10.720169 Details available
The user_ldap (aka LDAP user and group backend) application in ownCloud before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to bypass authentication via a null byte in the password and a valid user name, which triggers an unauthenticated bind.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.536Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9042 vulnerable 2026-06-08 05:06:10.718702 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9041 vulnerable 2026-06-08 05:06:10.691645 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4929 vulnerable 2026-06-08 05:05:46.432113 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3838 vulnerable 2026-06-08 05:05:43.012660 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3835 vulnerable 2026-06-08 05:05:43.010882 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3833 vulnerable 2026-06-08 05:05:42.995937 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2585 vulnerable 2026-06-08 05:05:29.281967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2057 vulnerable 2026-06-08 05:05:27.483586 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2056 vulnerable 2026-06-08 05:05:27.475968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2055 vulnerable 2026-06-08 05:05:27.474809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2054 vulnerable 2026-06-08 05:05:27.451542 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2053 vulnerable 2026-06-08 05:05:27.446044 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2051 vulnerable 2026-06-08 05:05:27.435135 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2049 vulnerable 2026-06-08 05:05:27.413636 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6403 vulnerable 2026-06-08 05:04:56.506581 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2150 vulnerable 2026-06-08 05:03:58.632810 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2089 vulnerable 2026-06-08 05:03:58.306688 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2086 vulnerable 2026-06-08 05:03:58.289960 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2048 vulnerable 2026-06-08 05:03:58.031792 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2047 vulnerable 2026-06-08 05:03:58.031352 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2046 vulnerable 2026-06-08 05:03:58.030505 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2045 vulnerable 2026-06-08 05:03:58.029785 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2044 vulnerable 2026-06-08 05:03:58.029304 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2043 vulnerable 2026-06-08 05:03:58.028534 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2042 vulnerable 2026-06-08 05:03:58.027410 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2041 vulnerable 2026-06-08 05:03:58.026380 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2040 vulnerable 2026-06-08 05:03:58.025363 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2039 vulnerable 2026-06-08 05:03:58.016744 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1967 vulnerable 2026-06-08 05:03:57.645327 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1963 vulnerable 2026-06-08 05:03:57.600466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.