Approved changes feed: RSS · Atom

cpe:2.3:a:owncloud:owncloud:5.0.14:*:*:*:*:*:*:*

part: a version: 5.0.14 update: *

VendorOwncloud (7adb7c81-0e09-5084-ad84-9888a985e435)
ProductOwncloud (0271b5cd-a422-50b1-98fd-dfe8bea7189b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/owncloud/core purl2cpe 2026-06-01 10:16:35.423573
pkg:rpm/fedora/owncloud purl2cpe 2026-06-01 10:16:35.423575
pkg:rpm/opensuse/owncloud purl2cpe 2026-06-01 10:16:35.423576

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-9048 vulnerable 2026-06-08 05:06:10.726689 Details available
The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote attackers to bypass the password-protection for shared files via the API.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.629Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9047 vulnerable 2026-06-08 05:06:10.725353 Details available
Multiple unspecified vulnerabilities in the preview system in ownCloud 6.x before 6.0.6 and 7.x before 7.0.3 allow remote attackers to read arbitrary files via unknown vectors.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.517Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9046 vulnerable 2026-06-08 05:06:10.723993 Details available
The OC_Util::getUrlContent function in ownCloud Server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to read arbitrary files via a file:// protocol.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.561Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9045 vulnerable 2026-06-08 05:06:10.722587 Details available
The FTP backend in user_external in ownCloud Server before 5.0.18 and 6.x before 6.0.6 allows remote attackers to bypass intended authentication requirements via a crafted password.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.531Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9043 vulnerable 2026-06-08 05:06:10.720338 Details available
The user_ldap (aka LDAP user and group backend) application in ownCloud before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to bypass authentication via a null byte in the password and a valid user name, which triggers an unauthenticated bind.
Published: 2015-02-04T18:00:00.000Z
Updated: 2024-08-06T13:33:13.536Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9042 vulnerable 2026-06-08 05:06:10.718872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9041 vulnerable 2026-06-08 05:06:10.696828 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4929 vulnerable 2026-06-08 05:05:46.432298 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3838 vulnerable 2026-06-08 05:05:43.012830 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3835 vulnerable 2026-06-08 05:05:43.011051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3833 vulnerable 2026-06-08 05:05:43.000745 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2585 vulnerable 2026-06-08 05:05:29.282142 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2057 vulnerable 2026-06-08 05:05:27.483748 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2056 vulnerable 2026-06-08 05:05:27.476133 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2055 vulnerable 2026-06-08 05:05:27.474982 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2054 vulnerable 2026-06-08 05:05:27.451712 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2053 vulnerable 2026-06-08 05:05:27.446223 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2051 vulnerable 2026-06-08 05:05:27.437010 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.