Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownStored XSS in autocomplete suggestions for chat @-mentionsCheck if you run itEPSS 0.74%Aug 10, 2018
- UnknownStored XSS in autocomplete suggestions for file commentsCheck if you run itEPSS 0.89%Aug 10, 2018
- UnknownStored XSS in contacts via group sharesCheck if you run itEPSS 0.64%Jun 21, 2018
- UnknownStored XSS in calendar via group sharesCheck if you run itEPSS 0.61%Jun 21, 2018
- UnknownFile access control rules not applied to image previewsCheck if you run itEPSS 0.89%Jun 21, 2018
- UnknownImproper validation on OAuth2 token endpointCheck if you run itEPSS 1.66%Jun 21, 2018
- UnknownApp password scope can be changed for other usersCheck if you run itEPSS 0.75%Feb 7, 2018
- UnknownCalendar and addressbook names disclosedCheck if you run itEPSS 0.72%May 8, 2017
- UnknownShare tokens for public calendars disclosedCheck if you run itEPSS 1.17%May 8, 2017
- UnknownStored XSS in Gallery applicationCheck if you run itEPSS 0.64%May 8, 2017
- UnknownLimitation of app specific password scope can be bypassedCheck if you run itEPSS 0.98%May 8, 2017
- UnknownReflected XSS in error pagesCheck if you run itEPSS 0.64%May 8, 2017
- UnknownDOM XSS vulnerability in search dialogueCheck if you run itEPSS 0.74%May 8, 2017
- UnknownCVE-2017-0888 is listed by Content-Spoofing in "files" app.Check if you run itEPSS 1.54%Feb 5, 2017
- UnknownBypassing quota limitationCheck if you run itEPSS 0.89%Feb 5, 2017
- UnknownDenial of Service attackCheck if you run itEPSS 1.23%Feb 5, 2017
- UnknownError message discloses existence of file in write-only shareCheck if you run itEPSS 0.90%Feb 5, 2017
- UnknownCreation of folders in read-only folders despite lacking permissionsCheck if you run itEPSS 0.67%Feb 5, 2017
- UnknownPermission increase on re-sharing via OCS APICheck if you run itEPSS 0.59%Feb 5, 2017
- UnknownContent-Spoofing in "dav" appCheck if you run itEPSS 2.08%Oct 10, 2016
- UnknownCVE-2016-9467 is listed by Content-Spoofing in "files" app.Check if you run itEPSS 2.97%Oct 10, 2016
- UnknownReflected XSS in Gallery applicationCheck if you run itEPSS 1.66%Oct 10, 2016
- UnknownStored XSS in CardDAV image exportCheck if you run itEPSS 1.12%Oct 10, 2016
- UnknownImproper authorization check on removing sharesCheck if you run itEPSS 1.62%Oct 10, 2016
- UnknownSMB User Authentication BypassCheck if you run itEPSS 4.09%Oct 10, 2016
Sort