Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownPossible denial of service when entering a long passwordOpen the advisoryJun 16, 2020
- UnknownPassword of share by mail is not hashed when given on the create share callOpen the advisoryJun 4, 2020
- UnknownIncrease random used for encryptionOpen the advisoryJun 4, 2020
- UnknownNew users can read all Nextcloud Deck data from previous user with same usernameOpen the advisoryJun 3, 2020
- UnknownImproper access control allows injecting tasks into other users decksOpen the advisoryMay 15, 2020
- UnknownCode injection possible with malformed Nextcloud Talk chat commandsOpen the advisoryApr 20, 2020
- UnknownLimit contacts photo uploading to imagesOpen the advisoryApr 16, 2020
- UnknownMissing permission check on resharing a boardOpen the advisoryApr 8, 2020
- UnknownMail app not verifying TLS host of mail serversOpen the advisoryMar 24, 2020
- UnknownXSS in Files PDF viewerOpen the advisoryMar 18, 2020
- UnknownMissing ownership check on remote wipe endpointOpen the advisoryMar 18, 2020
- UnknownCode injection in Nextcloud Desktop Client for macOSOpen the advisoryFeb 17, 2020
- UnknownSecure view shares can be downloaded by manipulating the URLOpen the advisoryFeb 7, 2020
- UnknownSSRF protection bypass in calendar subscriptionsOpen the advisoryDec 12, 2019
- UnknownCVE-2019-15615 is listed by Bypass lock protection in Android app.Open the advisoryDec 5, 2019
- UnknownWorkflow rules only check the file extension for the mimetype instead of the contentOpen the advisoryDec 4, 2019
- UnknownMissing sanitization in iOS App allows XSSOpen the advisoryNov 20, 2019
- UnknownLogin and token disclosure to other Nextcloud servicesOpen the advisoryNov 12, 2019
- UnknownDuplicate setup of second factor allowedOpen the advisoryOct 25, 2019
- UnknownFile-drop content is visible through the gallery appOpen the advisoryOct 22, 2019
- UnknownRemoving emails from circles does not revoke access to shared itemsOpen the advisoryOct 6, 2019
- UnknownMissing default timeout on HTTP requestsOpen the advisorySep 4, 2019
- UnknownGroup admins can create users with IDs of system foldersOpen the advisoryAug 12, 2019
- UnknownReflected XSS in svg logo generationOpen the advisoryAug 2, 2019
- UnknownName of private conversations leaked when linked via projects to a shared itemOpen the advisoryJul 29, 2019
Sort