File and Path Handling

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

1. Directory traversal vulnerability in the routing component in ownCloud Server before 7.0.6 and 8.0.x before 8.0.4, when running on Windows, allows remote attackers to reinstall th…CVE-2015-4716Owncloud · 25% likely

   CWE-22

2. Directory traversal vulnerability in ownCloud Server before 8.0.6 and 8.1.x before 8.1.1 allows remote authenticated users to list directory contents and possibly cause a denial o…CVE-2015-6500Owncloud · 2.6% likely

   CWE-22

3. Directory traversal vulnerability in the routing component in ownCloud Server before 5.0.17 and 6.0.x before 6.0.4 allows remote attackers to include and execute arbitrary local f…CVE-2014-4929Owncloud · 2.3% likely

   CWE-22

4. Directory traversal vulnerability in lib/files/view.php in ownCloud before 4.0.15, 4.5.x 4.5.11, and 5.x before 5.0.6 allows remote authenticated users to access arbitrary files v…CVE-2013-2039Owncloud · 2.0% likely

   CWE-22

5. Directory traversal vulnerability in apps/files_trashbin/index.php in ownCloud Server before 5.0.6 allows remote authenticated users to access arbitrary files via a .. (dot dot) i…CVE-2013-2085Owncloud · 1.5% likely

   CWE-22

6. The fetch function in OAuth/Curl.php in Dropbox-PHP, as used in ownCloud Server before 6.0.8, 7.x before 7.0.6, and 8.x before 8.0.4 when an external Dropbox storage has been moun…CVE-2015-4715Owncloud · 1.4% likely

   CWE-552

7. The files_antivirus component before 1.0.0 for ownCloud mishandles the protection mechanism by which malicious files (that have been uploaded to a public share) are supposed to be…CVE-2021-33828Owncloud · 1.2% likely

   CWE-434

8. ownCloud owncloud/client before 2.7 allows DLL Injection. The desktop client loaded development plugins from certain directories when they were present.CVE-2020-28646Owncloud · 0.8% likely

   CWE-427

9. ownCloud Android app vulnerable to Path TraversalCVE-2023-24804ownCloud · CVSS 5 · 0.5% likely

   CWE-221 bounty report

10. ownCloud 10 is vulnerable to Relative Path TraversalCVE-2025-53829owncloud · CVSS 8 · 0.5% likely

    CWE-23

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.