CVE-2016-15014

A vulnerability has been found in CESNET theme-cesnet up to 1.x on ownCloud and classified as problematic. Affected by this vulnerability is an unknown functionality of the file cesnet/core/lostpassword/templates/resetpassword.php. The manipulation leads to insufficiently protected credentials. Attacking locally is a requirement. Upgrading to version 2.0.0 is able to address this issue. The identifier of the patch is 2b857f2233ce5083b4d5bc9bfc4152f933c3e4a6. It is recommended to upgrade the affected component. The identifier VDB-217633 was assigned to this vulnerability.

• CWE-522

• https://github.com/CESNET/theme-cesnet/commit/2b857f2233ce5083b4d5bc9bfc4152f933c3e4a6Patch, Third Party Advisory
• https://github.com/CESNET/theme-cesnet/pull/1Patch, Third Party Advisory
• https://github.com/CESNET/theme-cesnet/releases/tag/2.0.0Third Party Advisory
• https://vuldb.com/?ctiid.217633Third Party Advisory, VDB Entry
• https://vuldb.com/?id.217633Third Party Advisory, VDB Entry
• https://github.com/CESNET/theme-cesnet/commit/2b857f2233ce5083b4d5bc9bfc4152f933c3e4a6Patch, Third Party Advisory
• https://github.com/CESNET/theme-cesnet/pull/1Patch, Third Party Advisory
• https://github.com/CESNET/theme-cesnet/releases/tag/2.0.0Third Party Advisory
• https://vuldb.com/?ctiid.217633Third Party Advisory, VDB Entry
• https://vuldb.com/?id.217633Third Party Advisory, VDB Entry

Published

Jan 7, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-15009A vulnerability classified as problematic has been found in …8.8
• CVE-2016-1501ownCloud Server before 8.0.9 and 8.1.x before 8.1.4 allow re…
• CVE-2016-15010** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified a…6.1
• CVE-2016-15011A vulnerability classified as problematic was found in e-Con…9.8
• CVE-2016-15012** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in…9.8
• CVE-2016-15013A vulnerability was found in ForumHulp searchresults. It has…9.8
• CVE-2016-15015A vulnerability, which was classified as problematic, was fo…5.3
• CVE-2016-15016A vulnerability was found in mrtnmtth joomla_mod_einsatz_sta…9.8
• CVE-2016-15017A vulnerability has been found in fabarea media_upload on TY…9.8
• CVE-2016-15018A vulnerability was found in krail-jpa up to 0.9.1. It has b…9.8
• CVE-2016-15019A vulnerability was found in tombh jekbox. It has been rated…7.5
• CVE-2016-1502NetApp SnapCenter Server 1.0 and 1.0P1 allows remote attacke…