nextcloud Vulnerability Advisory Catalog

Total 372 security vulnerabilities recorded for nextcloud software and firmware.

← Back to All Vendors
Component: cookbook

NextCloud Cookbook is a recipe library app. Prior to commit a46d9855 on the `master` branch and commit 489bb744 on the `main-0.9.x` branch, the `pull-...

📅 2023-05-26
CVSS 8.1 Dossier →
Component: nextcloud_server

Nextcloud server provides a home for data. A regression in the session handling between Nextcloud Server and the Nextcloud Text app prevented a correc...

📅 2023-05-26
CVSS 7.2 Dossier →
Component: user_oidc

user_oidc app is an OpenID Connect user backend for Nextcloud. Authentication can be broken/bypassed in user_oidc app. It is recommended that the Next...

📅 2023-05-25
CVSS 8.0 Dossier →
Component: nextcloud_server

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. In Nextcloud Server 24.0.0 prior to 24.0.11 and 25.0....

📅 2023-04-25
CVSS 3.1 Dossier →
Component: talk

Nextcloud Talk is a chat, video & audio call extension for Nextcloud. In affected versions a user that was added later to a conversation can use this ...

📅 2023-04-17
CVSS 3.5 Dossier →
Component: nextcloud_files_automated_tagging

Nextcloud is a personal home server system. Depending on the set up tags and other workflows this issue can be used to limit access of others or being...

📅 2023-04-17
CVSS 6.5 Dossier →
Component: desktop

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.7.0, by trusting...

📅 2023-04-04
CVSS 5.4 Dossier →
Component: desktop

Nextcloud is an open-source productivity platform. In Nextcloud Desktop client 3.0.0 until 3.8.0, Nextcloud Android app 3.13.0 until 3.25.0, and Nextc...

📅 2023-04-04
CVSS 6.9 Dossier →
Component: desktop

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.6.5, a malicious...

📅 2023-04-04
CVSS 6.7 Dossier →
Component: desktop

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.6.5, a malicious...

📅 2023-04-04
CVSS 6.7 Dossier →
Component: user_oidc

user_oidc is the OIDC connect user backend for Nextcloud, an open source collaboration platform. A vulnerability in versions 1.0.0 until 1.3.0 effecti...

📅 2023-04-04
CVSS 4.8 Dossier →
Component: nextcloud_server

Nextcloud Server is an open source personal cloud server. Nextcloud Server 24.0.0 until 24.0.6 and 25.0.0 until 25.0.4, as well as Nextcloud Enterpris...

📅 2023-04-03
CVSS 3.5 Dossier →
Component: talk

Nextcloud talk is a video & audio conferencing app for Nextcloud. In affected versions the talk app does not properly filter access to a conversations...

📅 2023-03-31
CVSS 3.5 Dossier →
Component: nextcloud_server

Nextcloud server is an open source home cloud implementation. In affected versions users that should not be able to download a file can still download...

📅 2023-03-31
CVSS 5.7 Dossier →
Component: richdocuments

Nextcloud richdocuments is a Nextcloud app integrating the office suit Collabora Online. In affected versions the secure view feature of the rich docu...

📅 2023-03-31
CVSS 5.7 Dossier →
Component: nextcloud_server

Nextcloud server is an open source home cloud implementation. In affected versions the generated fallback password when creating a share was using a w...

📅 2023-03-30
CVSS 3.5 Dossier →
Component: nextcloud_server

Nextcloud server is an open source home cloud implementation. In affected versions admins of a server were able to upload a logo or a favicon and to p...

📅 2023-03-30
CVSS 2.4 Dossier →
Component: nextcloud

Nextcloud iOS is an ios application used to interface with the nextcloud home cloud ecosystem. In versions prior to 4.7.0 when an attacker has physica...

📅 2023-03-30
CVSS 4.4 Dossier →
Component: nextcloud

Nextcloud android is an android app for interfacing with the nextcloud home server ecosystem. In versions from 3.7.0 and before 3.24.1 an attacker tha...

📅 2023-03-30
CVSS 4.4 Dossier →
Component: nextcloud_server

Nextcloud server is an open source home cloud implementation. In releases of the 25.0.x branch before 25.0.3 an inefficient fetch operation may impact...

📅 2023-03-30
CVSS 5.7 Dossier →
Component: nextcloud_server

Nextcloud server is an open source home cloud implementation. In affected versions when a recipient receives 2 shares with the same name, while a memo...

📅 2023-03-30
CVSS 5.5 Dossier →
CVE-2023-26482 CRITICAL
Component: nextcloud_server

Nextcloud server is an open source home cloud implementation. In affected versions a missing scope validation allowed users to create workflows which ...

📅 2023-03-30
CVSS 9.0 Dossier →
Component: nextcloud_server

Nextcloud server is an open source, personal cloud implementation. In versions from 24.0.0 and before 24.0.9 a user could escalate their permissions t...

📅 2023-03-27
CVSS 3.5 Dossier →
Component: nextcloud_server

Nextcloud server is an open source, personal cloud implementation. In affected versions a malicious user could try to reset the password of another us...

📅 2023-03-27
CVSS 5.3 Dossier →
Page 6 of 16 (372 Total Records)