nextcloud Vulnerability Advisory Catalog

Total 372 security vulnerabilities recorded for nextcloud software and firmware.

← Back to All Vendors
Component: nextcloud_server

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Enterprise Server is the enterprise ver...

📅 2023-03-22
CVSS 4.2 Dossier →
Component: nextcloud_talk

Nextcloud Talk is a fully on-premises audio/video and chat communication service. When cron jobs were misconfigured and therefore messages are not exp...

📅 2023-02-27
CVSS 2.6 Dossier →
Component: nextcloud_server

Nextcloud is an Open Source private cloud software. Versions 24.0.4 and above, prior to 24.0.7, and 25.0.0 and above, prior to 25.0.1, contain Imprope...

📅 2023-02-25
CVSS 5.7 Dossier →
Component: nextcloud_server

Nextcloud is an Open Source private cloud software. Versions 25.0.0 and above, prior to 25.0.3, are subject to Uncontrolled Resource Consumption. A us...

📅 2023-02-25
CVSS 4.3 Dossier →
Component: nextcloud_server

Nextcloud server is a self hosted home cloud product. In affected versions the `OC\Files\Node\Folder::getFullPath()` function was validating and norma...

📅 2023-02-22
CVSS 6.0 Dossier →
Component: nextcloud_server

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior to 24.0.8 and 23.0.12 and Next...

📅 2023-02-13
CVSS 5.3 Dossier →
Component: nextcloud_server

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise Server prio...

📅 2023-02-13
CVSS 3.7 Dossier →
Component: mail

Nextcloud Mail is an email app for the Nextcloud home server platform. Prior to versions 2.2.1, 1.14.5, 1.12.9, and 1.11.8, an attacker can access the...

📅 2023-02-13
CVSS 4.1 Dossier →
Component: nextcloud_server

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Office is a document collaboration app ...

📅 2023-02-13
CVSS 2.3 Dossier →
Component: richdocuments

Nextcloud office/richdocuments is an office suit for the nextcloud server platform. In affected versions the Collabora integration can be tricked to p...

📅 2023-02-08
CVSS 5.8 Dossier →
Component: mail

Nextcloud mail is an email app for the nextcloud home server platform. In affected versions the SMTP, IMAP and Sieve host fields allowed to scan for i...

📅 2023-02-06
CVSS 5.0 Dossier →
Component: desktop

The Nextcloud Desktop Client is a tool to synchronize files from a Nextcloud Server with your computer. Versions prior to 3.6.3 are missing sanitisati...

📅 2023-02-06
CVSS 5.4 Dossier →
Component: mail

Nextcloud mail is an email app for the nextcloud home server platform. In versions prior to 2.2.2 user's passwords were stored in cleartext in the dat...

📅 2023-02-06
CVSS 2.0 Dossier →
Component: deck

Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Broken access contro...

📅 2023-01-14
CVSS 3.5 Dossier →
Component: deck

Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. A database...

📅 2023-01-14
CVSS 3.5 Dossier →
Component: deck

Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. When getting the ref...

📅 2023-01-10
CVSS 5.8 Dossier →
Component: talk

Talk-Android enables users to have video & audio calls through Nextcloud on Android. Due to passcode bypass, an attacker is able to access the user's ...

📅 2023-01-09
CVSS 2.1 Dossier →
Component: desktop

Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. It is possible to ma...

📅 2023-01-09
CVSS 5.3 Dossier →
Component: nextcloud_talk

Nextcould Talk android is a video and audio conferencing app for Nextcloud. Prior to versions 12.2.8, 13.0.10, 14.0.6, and 15.0.0, guests can continue...

📅 2022-12-01
CVSS 4.8 Dossier →
Component: nextcloud_server

Nextcloud Server is an open source personal cloud server. Prior to versions 24.0.7 and 25.0.1, disabled download shares still allow download through p...

📅 2022-12-01
CVSS 2.6 Dossier →
Component: nextcloud_server

Nextcloud Server is an open source personal cloud server. Prior to versions 23.0.11, 24.0.7, and 25.0.0, there is no password length limit when creati...

📅 2022-12-01
CVSS 2.4 Dossier →
Component: nextcloud_server

Nextcloud Server is an open source personal cloud server. Prior to versions 23.0.10 and 24.0.5, calendar name lengths are not validated before writing...

📅 2022-12-01
CVSS 3.5 Dossier →
Component: desktop

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client applicat...

📅 2022-11-25
CVSS 4.6 Dossier →
Component: desktop

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client applicat...

📅 2022-11-25
CVSS 4.6 Dossier →
Page 7 of 16 (372 Total Records)