nextcloud Vulnerability Advisory Catalog

Total 372 security vulnerabilities recorded for nextcloud software and firmware.

← Back to All Vendors
Component: nextcloud_server

Nextcloud server is a self hosted personal cloud system. Under some circumstance it was possible to bypass the second factor of 2FA after successfully...

📅 2024-06-14
CVSS 7.3 Dossier →
Component: user_oidc

user_oidc app is an OpenID Connect user backend for Nextcloud. Missing access control on the ID4me endpoint allows an attacker to register an account ...

📅 2024-06-14
CVSS 6.3 Dossier →
CVE-2024-30247 CRITICAL
Component: nextcloudpi

NextcloudPi is a ready to use image for Virtual Machines, Raspberry Pi, Odroid HC1, Rock64 and other boards. A command injection vulnerability in Next...

📅 2024-03-29
CVSS 10.0 Dossier →
Component: zipper

Nextcloud files Zip app is a tool to create zip archives from one or multiple files from within Nextcloud. In affected versions users can download "vi...

📅 2024-01-18
CVSS 4.1 Dossier →
Component: guests

Nextcloud guests app is a utility to create guest users which can only see files shared with them. In affected versions users were able to load the fi...

📅 2024-01-18
CVSS 5.4 Dossier →
Component: guests

Nextcloud guests app is a utility to create guest users which can only see files shared with them. In affected versions users could change the allowed...

📅 2024-01-18
CVSS 4.1 Dossier →
Component: nextcloud_server

Nextcloud server is a self hosted personal cloud system. In affected versions OAuth codes did not expire. When an attacker would get access to an auth...

📅 2024-01-18
CVSS 3.0 Dossier →
Component: sso_\&_saml_authentication

Nextcloud User Saml is an app for authenticating Nextcloud users using SAML. In affected versions users can be given a link to the Nextcloud server an...

📅 2024-01-18
CVSS 3.1 Dossier →
CVE-2024-22213 UNKNOWN
Component: deck

Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. In affected versions...

📅 2024-01-18
CVE-2024-22212 CRITICAL
Component: global_site_selector

Nextcloud Global Site Selector is a tool which allows you to run multiple small Nextcloud instances and redirect users to the right server. A problem ...

📅 2024-01-18
CVSS 9.6 Dossier →
Component: nextcloud_server

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versions 26.0.9 and 27.1.4; as well ...

📅 2023-12-22
CVSS 5.3 Dossier →
Component: nextcloud_server

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versions 26.0.9 and 27.1.4; as well ...

📅 2023-12-22
CVSS 5.4 Dossier →
Component: nextcloud

The Nextcloud iOS Files app allows users of iOS to interact with Nextcloud, a self-hosted productivity platform. Prior to version 4.9.2, the applicati...

📅 2023-12-22
CVSS 4.3 Dossier →
Component: calendar

Nextcloud/Cloud is a calendar app for Nextcloud. An attacker can gain access to stacktrace and internal paths of the server when generating an excepti...

📅 2023-12-22
CVSS 3.5 Dossier →
Component: mail

Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. Starting in version 1.13.0 and prior to version 2.2.8 and 3.3.0, an...

📅 2023-11-21
CVSS 3.5 Dossier →
Component: nextcloud_server

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6,...

📅 2023-11-21
CVSS 5.0 Dossier →
Component: nextcloud_server

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6,...

📅 2023-11-21
CVSS 4.2 Dossier →
Component: nextcloud_server

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6,...

📅 2023-11-21
CVSS 4.3 Dossier →
Component: nextcloud_server

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6,...

📅 2023-11-21
CVSS 2.4 Dossier →
Component: nextcloud_server

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8,...

📅 2023-11-21
CVSS 3.5 Dossier →
Component: nextcloud_server

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8,...

📅 2023-11-21
CVSS 3.5 Dossier →
Component: nextcloud_server

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8,...

📅 2023-11-21
CVSS 8.5 Dossier →
Component: calendar

Nextcloud calendar is a calendar app for the Nextcloud server platform. Due to missing precondition checks the server was trying to validate strings o...

📅 2023-10-16
CVSS 4.3 Dossier →
Component: talk

Nextcloud talk is a chat module for the Nextcloud server platform. In affected versions brute force protection of public talk conversation passwords c...

📅 2023-10-16
CVSS 4.3 Dossier →
Page 4 of 16 (372 Total Records)