Затронутые ветки версий
Известные уязвимости
| CVE | Название | Затронутые версии | CVSS | Эксплуатируется | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
| CVE-2023-7273 | Cross Site Request Forgery in Kiteworks OwnCloud | ≤ 10.12.2 | 6.8 | — | 2024-10-01 | |
| CVE-2015-4715 | The fetch function in OAuth/Curl.php in Dropbox-PHP, as used in ownCloud Server before 6.0.8, 7.x before 7.0.6... | * | — | — | 2020-02-18 | |
| CVE-2016-9461 | Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit check permission... | * | — | — | 2017-03-28 | |
| CVE-2016-9459 | Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a log pollution vulnerability... | * | — | — | 2017-03-28 | |
| CVE-2016-9462 | Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying restore privileges wh... | * | — | — | 2017-03-28 | |
| CVE-2016-9465 | Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Stored XSS in CardDAV imag... | * | — | — | 2017-03-28 | |
| CVE-2016-9468 | Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofin... | * | — | — | 2017-03-28 | |
| CVE-2016-9467 | Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofin... | * | — | — | 2017-03-28 | |
| CVE-2016-9460 | Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a content-spoofing attack in t... | * | 5.3 | — | 2017-03-28 | |
| CVE-2015-7699 | The files_external app in ownCloud Server before 7.0.9, 8.0.x before 8.0.7, and 8.1.x before 8.1.2 allows remo... | * | — | — | 2015-10-27 | |
| CVE-2013-0201 | Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attack... | * | — | — | 2014-03-18 | |
| CVE-2012-5665 | ownCloud 4.0.x before 4.0.10 and 4.5.x before 4.5.5 does not properly restrict access to settings.php, which a... | * | — | — | 2013-01-03 | |
| CVE-2012-5666 | Cross-site scripting (XSS) vulnerability in bookmarks/js/bookmarks.js in ownCloud 4.0.x before 4.0.10 and 4.5.... | * | — | — | 2013-01-03 | |
| CVE-2012-5607 | The "Lost Password" reset functionality in ownCloud before 4.0.9 and 4.5.0 does not properly check the securit... | * | — | — | 2012-12-18 | |
| CVE-2012-5608 | Cross-site scripting (XSS) vulnerability in apps/user_webdavauth/settings.php in ownCloud 4.5.x before 4.5.2 a... | * | — | — | 2012-12-18 | |
| CVE-2012-5610 | Incomplete blacklist vulnerability in lib/filesystem.php in ownCloud before 4.0.9 and 4.5.x before 4.5.2 allow... | * | — | — | 2012-12-18 | |
| CVE-2012-5606 | Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.9 and 4.5.0 allow remote attackers... | * | — | — | 2012-12-18 | |
| CVE-2012-5609 | Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.5.2 allows remote authenticated use... | * | — | — | 2012-12-18 | |
| CVE-2012-4396 | Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.2 allow remote attackers to inject... | * | — | — | 2012-09-06 | |
| CVE-2012-4391 | Cross-site request forgery (CSRF) vulnerability in core/ajax/appconfig.php in ownCloud before 4.0.7 allows rem... | * | — | — | 2012-09-06 | |
| CVE-2012-4752 | appconfig.php in ownCloud before 4.0.6 does not properly restrict access, which allows remote authenticated us... | * | — | — | 2012-09-06 | |
| CVE-2012-4397 | Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.1 allow remote attackers to inject... | * | — | — | 2012-09-06 | |
| CVE-2012-4389 | Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.7 allows remote attackers to exec... | * | — | — | 2012-09-06 | |
| CVE-2012-4395 | Cross-site scripting (XSS) vulnerability in index.php in ownCloud before 4.0.3 allows remote attackers to inje... | * | — | — | 2012-09-06 | |
| CVE-2012-4394 | Cross-site scripting (XSS) vulnerability in apps/files/js/filelist.js in ownCloud before 4.0.5 allows remote a... | * | — | — | 2012-09-06 | |
| CVE-2012-4390 | (1) apps/calendar/appinfo/remote.php and (2) apps/contacts/appinfo/remote.php in ownCloud before 4.0.7 allows... | * | — | — | 2012-09-06 | |
| CVE-2012-4392 | index.php in ownCloud 4.0.7 does not properly validate the oc_token cookie, which allows remote attackers to b... | * | — | — | 2012-09-06 | |
| CVE-2012-4393 | Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud before 4.0.6 allow remote attackers to... | * | — | — | 2012-09-06 |
Отслеживайте эти версии на своих серверах
InfraGuard собирает версии установленного ПО со всех серверов и отмечает версии с известными уязвимостями. Self-hosted — данные не покидают вашу сеть.
Данные: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (об EPSS см. https://www.first.org/epss), endoflife.date. Список ПО: awesome-selfhosted (CC BY-SA 3.0).