Nextcloud vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
185 matching records
- Medium5.0Nextcloud Desktop is the desktop sync client for Nextcloud.Check if you run itEPSS 0.18%May 16, 2025
- Medium4.3Nextcloud Server is a self hosted personal cloud system.Check if you run itEPSS 0.38%May 16, 2025
- Medium6.4Nextcloud Server is a self hosted personal cloud system.Check if you run itEPSS 0.39%May 16, 2025
- Critical9.8ownCloud Improper Authentication VulnerabilityPatch nowKEVEPSS 43.19%Nov 21, 2023
- High7.5ownCloud graphapi Information Disclosure VulnerabilityPatch nowKEVEPSS 77.75%Nov 21, 2023
- UnknownMissing URL validation allowed RCE for the server on the Desktop clientCheck if you run itEPSS 5.04%Feb 24, 2021
- UnknownReflected XSS when renaming malicious fileCheck if you run itEPSS 1.06%Jan 25, 2021
- UnknownExternal storage credentials stored for wrong userCheck if you run itEPSS 1.69%Jan 25, 2021
- UnknownStored XSS in markdown file with Nextcloud Talk using Internet ExplorerCheck if you run itEPSS 0.94%Nov 18, 2020
- UnknownPotential DDoS when posting long data into workflow validation rulesCheck if you run itEPSS 1.58%Nov 18, 2020
- UnknownXSS through image upload of contacts using svg fileCheck if you run itEPSS 0.63%Oct 20, 2020
- UnknownXSS through image upload on contacts using svg file with png extensionCheck if you run itEPSS 0.64%Oct 20, 2020
- UnknownSocial App does not validate server certificates for outgoing connectionsCheck if you run itEPSS 0.65%Oct 15, 2020
- UnknownImproper access control to messages of Social appCheck if you run itEPSS 1.02%Oct 15, 2020
- UnknownDenial of Service by requesting to reset a passwordCheck if you run itEPSS 1.83%Oct 3, 2020
- UnknownImproper integrity protection of server-side encryption keysCheck if you run itEPSS 0.74%Oct 3, 2020
- UnknownImproper confidentiality protection of server-side encryption keysCheck if you run itEPSS 0.32%Oct 3, 2020
- UnknownExternal storage app saves password for all users in the databaseCheck if you run itEPSS 0.51%Oct 3, 2020
- UnknownDowngrade encryption scheme and break integrity through known-plaintext attackCheck if you run itEPSS 0.29%Aug 26, 2020
- UnknownMessage Authentication Codes calculated by the Default Encryption Module allow an attacker to silently overwrite blocks in a fileCheck if you run itEPSS 0.73%Aug 26, 2020
- UnknownPIN for passwordless WebAuthn is asked for but not verifiedCheck if you run itEPSS 0.59%Aug 25, 2020
- UnknownMissing rate limit on signup pageCheck if you run itEPSS 1.91%Aug 3, 2020
- UnknownRe-Sharing allows increase of privilegesCheck if you run itEPSS 1.47%Jul 16, 2020
- UnknownAccess control missing while viewing the attachments in the 'All boards'Check if you run itEPSS 0.78%Jul 15, 2020
- UnknownMissing memory corruption protection on Windows release builtCheck if you run itEPSS 0.35%Jul 10, 2020