nextcloud Vulnerability Advisory Catalog

Total 372 security vulnerabilities recorded for nextcloud software and firmware.

← Back to All Vendors
Component: talk

Nextcould talk android is the android OS implementation of the nextcloud talk chat system. In affected versions the receiver is not protected by broad...

📅 2022-11-25
CVSS 3.3 Dossier →
Component: nextcloud_enterprise_server

Nextcloud server is an open source personal cloud server. Affected versions of nextcloud server did not properly limit user display names which could ...

📅 2022-11-25
CVSS 3.5 Dossier →
Component: openid_connect_user_backend

user_oidc is an OpenID Connect user backend for Nextcloud. In versions prior to 1.2.1 sensitive information such as the OIDC client credentials and to...

📅 2022-11-25
CVSS 4.3 Dossier →
Component: openid_connect_user_backend

user_oidc is an OpenID Connect user backend for Nextcloud. Versions prior to 1.2.1 did not properly validate discovery urls which may lead to a stored...

📅 2022-11-25
CVSS 3.5 Dossier →
Component: desktop

Nextcloud also ships a CLI utility called nextcloudcmd which is sometimes used for automated scripting and headless servers. Versions of nextcloudcmd ...

📅 2022-11-25
CVSS 3.9 Dossier →
Component: desktop

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client applicat...

📅 2022-11-25
CVSS 4.6 Dossier →
Component: desktop

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In version 3.6.0, if a user received a malicious...

📅 2022-11-11
CVSS 6.6 Dossier →
Component: nextcloud_enterprise_server

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. In Nextcloud Server prior to versions 23.0.9 and 24.0...

📅 2022-10-27
CVSS 4.0 Dossier →
Component: nextcloud_enterprise_server

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior to versions 23.0.10 and 24.0.6...

📅 2022-10-27
CVSS 4.8 Dossier →
Component: nextcloud_enterprise_server

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise Server prio...

📅 2022-10-27
CVSS 3.5 Dossier →
Component: talk

Nextcloud Talk is an open source chat, video & audio calls client for the Nextcloud platform. In affected versions an attacker could see the last vide...

📅 2022-09-17
CVSS 4.3 Dossier →
Component: nextcloud

Nextcloud android is the official Android client for the Nextcloud home server platform. Internal paths to the Nextcloud Android app files are not pro...

📅 2022-09-17
CVSS 3.2 Dossier →
Component: nextcloud_enterprise_server

Nextcloud server is an open source personal cloud platform. In affected versions it was found that locally running webservices can be found and reques...

📅 2022-09-16
CVSS 3.0 Dossier →
Component: files_access_control

Nextcloud files access control is a nextcloud app to manage access control for files. Users with limited access can see file names in certain cases wh...

📅 2022-09-15
CVSS 2.6 Dossier →
Component: nextcloud_enterprise_server

Nextcloud server is an open source personal cloud product. Affected versions of this package are vulnerable to Information Exposure which fails to str...

📅 2022-09-15
CVSS 6.4 Dossier →
Component: password_policy

Nextcloud Password Policy is an app that enables a Nextcloud server admin to define certain rules for passwords. Prior to versions 22.2.10, 23.0.7, an...

📅 2022-09-06
CVSS 2.7 Dossier →
Component: talk

Nextcloud Talk is a video and audio conferencing app for Nextcloud. Prior to versions 12.2.7, 13.0.7, and 14.0.3, password protected conversations are...

📅 2022-08-12
CVSS 3.5 Dossier →
Component: mail

Nextcloud Mail is an email application for the nextcloud personal cloud product. Affected versions of Nextcloud mail would log user passwords to disk ...

📅 2022-08-04
CVSS 3.1 Dossier →
Component: mail

Nextcloud Mail is an email application for the nextcloud personal cloud product. Affected versions shipped with a CSS minifier on the path `./vendor/c...

📅 2022-08-04
CVSS 8.3 Dossier →
Component: nextcloud_server

Nextcloud server is an open source personal cloud solution. The audit log is used to get a full trail of the actions which has been incompletely popul...

📅 2022-08-04
CVSS 2.1 Dossier →
Component: nextcloud_server

Nextcloud server is an open source personal cloud solution. In affected versions an attacker could brute force to find if federated sharing is being u...

📅 2022-08-04
CVSS 6.5 Dossier →
Component: nextcloud_mail

Nextcloud mail is a Mail app for the Nextcloud home server product. Versions of Nextcloud mail prior to 1.12.2 were found to be missing user account o...

📅 2022-07-06
CVSS 5.4 Dossier →
Component: nextcloud_server

Nextcloud server is an open source personal cloud server. Affected versions were found to be vulnerable to SMTP command injection. The impact varies b...

📅 2022-07-05
CVSS 5.4 Dossier →
Component: richdocuments

richdocuments is the repository for NextCloud Collabra, the app for Nextcloud Office collaboration. Prior to versions 6.0.0, 5.0.4, and 4.2.6, a user ...

📅 2022-06-02
CVSS 6.5 Dossier →
Page 8 of 16 (372 Total Records)