nextcloud Vulnerability Advisory Catalog

Total 372 security vulnerabilities recorded for nextcloud software and firmware.

← Back to All Vendors
Component: mail

Nextcloud mail is an email app for the Nextcloud home server platform. In affected versions a missing check of origin, target and cookies allows for a...

📅 2023-10-16
CVSS 4.3 Dossier →
Component: nextcloud_server

Nextcloud server is an open source home cloud platform. Affected versions of Nextcloud stored OAuth2 tokens in plaintext which allows an attacker who ...

📅 2023-10-16
CVSS 6.5 Dossier →
Component: nextcloud_server

Nextcloud is an open source home cloud server. When Memcached is used as `memcache.distributed` the rate limiting in Nextcloud Server could be reset u...

📅 2023-10-16
CVSS 4.3 Dossier →
Component: nextcloud_server

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server starting with 25.0.0 and prior to 25.09 and 2...

📅 2023-10-13
CVSS 5.0 Dossier →
Component: nextcloud_server

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 20.0.0 and prior to versions 20.0.14.15, 21.0...

📅 2023-08-10
CVSS 8.1 Dossier →
Component: nextcloud_server

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 19.0.0 and prior to versions 19.0.13.10, 20.0...

📅 2023-08-10
CVSS 7.7 Dossier →
Component: nextcloud_server

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 24.0.4 and prior to versions 25.0.9, 26.0.4, ...

📅 2023-08-10
CVSS 3.5 Dossier →
Component: nextcloud_server

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.9, 26.0.4, ...

📅 2023-08-10
CVSS 3.5 Dossier →
Component: nextcloud_server

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 22.0.0 and prior to versions 22.2.10.13, 23.0...

📅 2023-08-10
CVSS 5.8 Dossier →
Component: talk

Nextcloud Talk Android allows users to place video and audio calls through Nextcloud on Android. Prior to version 17.0.0, an unprotected intend allowe...

📅 2023-08-10
CVSS 7.8 Dossier →
Component: notes

Notes is a note-taking app for Nextcloud, an open-source cloud platform. Starting in version 4.4.0 and prior to version 4.8.0, when creating a note fi...

📅 2023-08-10
CVSS 3.5 Dossier →
Component: user_oidc

user_oidc provides the OIDC connect user backend for Nextcloud, an open-source cloud platform. Starting in version 1.0.0 and prior to version 1.3.3, a...

📅 2023-08-10
CVSS 3.8 Dossier →
Component: user_oidc

user_oidc provides the OIDC connect user backend for Nextcloud, an open-source cloud platform. Starting in version 1.0.0 and prior to version 1.3.3, m...

📅 2023-08-10
CVSS 4.8 Dossier →
Component: nextcloud_server

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 22.0.0 and prior to versions 22.2.10.13, 23.0...

📅 2023-08-10
CVSS 6.5 Dossier →
Component: nextcloud_server

Nextcloud Server is a space for data storage on Nextcloud, a self-hosted productivity playform. In NextCloud Server versions 25.0.0 until 25.0.7 and 2...

📅 2023-06-23
CVSS 8.4 Dossier →
Component: nextcloud_server

NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. In NextCloud Server versions...

📅 2023-06-23
CVSS 7.6 Dossier →
Component: end-to-end_encryption

Nextcloud End-to-end encryption app provides all the necessary APIs to implement End-to-End encryption on the client side. By providing an invalid met...

📅 2023-06-23
CVSS 5.7 Dossier →
Component: nextcloud_server

NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. In NextCloud Server versions...

📅 2023-06-23
CVSS 8.7 Dossier →
Component: nextcloud_server

NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. Starting in version 26.0.0 a...

📅 2023-06-23
CVSS 4.1 Dossier →
Component: nextcloud_server

Nextcloud Server is a data storage system for Nextcloud, a self-hosted productivity platform. When multiple requests are sent in parallel, all of them...

📅 2023-06-22
CVSS 8.7 Dossier →
Component: calendar

Calendar app for Nextcloud easily sync events from various devices with your Nextcloud. Some internal paths of the website are disclosed when the SMTP...

📅 2023-05-30
CVSS 2.6 Dossier →
CVE-2023-33182 UNKNOWN
Component: contacts

Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing. The unsanitized SVG is converted to a Ja...

📅 2023-05-30
Component: mail

Nextcloud Mail is a mail app in Nextcloud. A blind SSRF attack allowed to send GET requests to services running in the same web server. It is recommen...

📅 2023-05-27
CVSS 3.5 Dossier →
Component: nextcloud_server

Nextcloud server is an open source personal cloud implementation. Missing brute-force protection on the WebDAV endpoints via the basic auth header all...

📅 2023-05-26
CVSS 8.1 Dossier →
Page 5 of 16 (372 Total Records)