nextcloud Vulnerability Advisory Catalog

Total 372 security vulnerabilities recorded for nextcloud software and firmware.

← Back to All Vendors
Component: nextcloud_server

Nextcloud is an open-source, self-hosted productivity platform. Prior to versions 20.0.13, 21.0.5, and 22.2.0, Nextcloud Server did not implement a da...

📅 2021-10-25
CVSS 8.1 Dossier →
Component: deck

Nextcloud is an open-source, self-hosted productivity platform. A missing permission check in Nextcloud Deck before 1.2.9, 1.4.5 and 1.5.3 allows anot...

📅 2021-10-25
CVSS 8.1 Dossier →
Component: officeonline

Nextcloud is an open-source, self-hosted productivity platform. The Nextcloud OfficeOnline application prior to version 1.1.1 returned verbatim except...

📅 2021-10-25
CVSS 3.5 Dossier →
Component: richdocuments

Nextcloud is an open-source, self-hosted productivity platform. The Nextcloud Richdocuments application prior to versions 3.8.6 and 4.2.3 returned ver...

📅 2021-10-25
CVSS 4.8 Dossier →
Component: contacts

Nextcloud is an open-source, self-hosted productivity platform. The Nextcloud Contacts application prior to version 4.0.3 was vulnerable to a stored C...

📅 2021-10-25
CVSS 6.4 Dossier →
Component: mail

Nextcloud is an open-source, self-hosted productivity platform The Nextcloud Mail application prior to versions 1.10.4 and 1.11.0 does by default not ...

📅 2021-10-25
CVSS 3.5 Dossier →
CVE-2021-32802 CRITICAL
Component: nextcloud_server

Nextcloud server is an open source, self hosted personal cloud. Nextcloud supports rendering image previews for user provided file content. For some i...

📅 2021-09-07
CVSS 9.3 Dossier →
Component: nextcloud_server

Nextcloud server is an open source, self hosted personal cloud. In affected versions logging of exceptions may have resulted in logging potentially se...

📅 2021-09-07
CVSS 5.5 Dossier →
Component: nextcloud_server

Nextcloud server is an open source, self hosted personal cloud. In affected versions an attacker is able to bypass Two Factor Authentication in Nextcl...

📅 2021-09-07
CVSS 8.1 Dossier →
Component: richdocuments

Nextcloud Richdocuments is an open source collaborative office suite. In affected versions there is a lack of rate limiting on the Richdocuments OCS e...

📅 2021-09-07
CVSS 5.3 Dossier →
Component: richdocuments

Nextcloud Richdocuments is an open source collaborative office suite. In affected versions the File Drop features ("Upload Only" public link shares in...

📅 2021-09-07
CVSS 7.5 Dossier →
Component: nextcloud_server

Nextcloud Text is an open source plaintext editing application which ships with the nextcloud server. In affected versions the Nextcloud Text applicat...

📅 2021-09-07
CVSS 5.3 Dossier →
Component: deck

Deck is an open source kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. In affe...

📅 2021-09-07
CVSS 6.5 Dossier →
Component: circles

Nextcloud Circles is an open source social network built for the nextcloud ecosystem. In affected versions the Nextcloud Circles application allowed a...

📅 2021-09-07
CVSS 6.5 Dossier →
Component: circles

Nextcloud Circles is an open source social network built for the nextcloud ecosystem. In affected versions the Nextcloud Circles application is vulner...

📅 2021-09-07
CVSS 5.8 Dossier →
Component: desktop

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with a computer. The Nextcloud Desktop Client invokes its uninstalle...

📅 2021-08-18
CVSS 7.3 Dossier →
Component: desktop

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with a computer. Clients using the Nextcloud end-to-end encryption f...

📅 2021-08-18
CVSS 6.5 Dossier →
Component: richdocuments

Nextcloud Richdocuments in an open source self hosted online office. Nextcloud uses the WOPI ("Web Application Open Platform Interface") protocol to c...

📅 2021-07-27
CVSS 4.3 Dossier →
Component: nextcloud_server

Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, there was a lack of ratelimiting ...

📅 2021-07-12
CVSS 5.3 Dossier →
Component: nextcloud_server

Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, the Nextcloud Text application sh...

📅 2021-07-12
CVSS 3.1 Dossier →
Component: nextcloud_server

Nextcloud Text is a collaborative document editing application that uses Markdown. A cross-site scripting vulnerability is present in versions prior t...

📅 2021-07-12
CVSS 4.8 Dossier →
Component: nextcloud

Nextcloud Android Client is the Android client for Nextcloud. Clients using the Nextcloud end-to-end encryption feature download the public and privat...

📅 2021-07-12
CVSS 5.7 Dossier →
Component: nextcloud_server

Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, webauthn tokens were not deleted ...

📅 2021-07-12
CVSS 7.1 Dossier →
Component: nextcloud_server

Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, default share permissions were no...

📅 2021-07-12
CVSS 3.5 Dossier →
Page 10 of 16 (372 Total Records)