Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.2Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and Oct…EPSS 1.2%Oct 13, 2026
- Medium6.3OpenClaw versions prior to 2026.2.25 lack durable replay state for Nextcloud Talk webhook events, allowing valid signed webhook requests to be replayed without suppression.Mar 19, 2026
- Critical9.3OpenClaw's Nextcloud Talk plugin versions prior to 2026.2.6 accept equality matching on the mutable actor.name display name field for allowlist validation, allowing at…Mar 5, 2026
- Medium4.3Nextcloud Server 30.0.0 is vulnerable to an Insecure Direct Object Reference (IDOR) in the /core/preview endpoint.EPSS 0.3%Dec 12, 2025
- Critical9.8ownCloud Improper Authentication VulnerabilityKEVEPSS 42.9%Nov 21, 2023
- High7.5ownCloud graphapi Information Disclosure VulnerabilityKEVEPSS 78.4%Nov 21, 2023
6 records · page 1 of 1
PreviousNext