&gt; I run ownCloud, despite some reservations about its security. I&#x27;m not too concerned about the data in ownCloud itself (if it&#x27;s private, then I encrypt it client-side, but most things I put in ownCloud are not very private). I&#x27;m more concerned about it being used as a launching point for an attack on my home server. As a kind of compromise, I&#x27;m running it in a VM.<p>ownCloud does run a bug bounty program (<a href="https:&#x2F;&#x2F;hackerone.com&#x2F;owncloud" rel="nofollow">https:&#x2F;&#x2F;hackerone.com&#x2F;owncloud</a>) and the company supporting the project also employs internal security experts.<p>You might also want to read <a href="https:&#x2F;&#x2F;statuscode.ch&#x2F;2015&#x2F;09&#x2F;ownCloud-security-development-over-the-years&#x2F;" rel="nofollow">https:&#x2F;&#x2F;statuscode.ch&#x2F;2015&#x2F;09&#x2F;ownCloud-security-development-...</a> which covers why comparing CVEs is not a reliably way to compare the security of products.