Nextcloud vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
185 matching records
- UnknownMemory Leak in OCUtil.dll library in Desktop client can lead to DoSCheck if you run itEPSS 0.47%Jul 10, 2020
- UnknownLinux client is vulnerable to directory traversal when downloading filesCheck this weekEPSS 25.77%Jul 10, 2020
- UnknownClear text storage of proxy parameters and passwordsCheck if you run itEPSS 0.91%Jul 10, 2020
- UnknownArbitrary code execution in desktop client via OpenSSL configCheck if you run itEPSS 0.66%Jul 10, 2020
- UnknownXSS in desktop client via invalid server address on login formCheck if you run itEPSS 1.40%Jul 10, 2020
- UnknownPossible denial of service when entering a long passwordCheck if you run itEPSS 1.32%Jun 16, 2020
- UnknownPassword of share by mail is not hashed when given on the create share callCheck if you run itEPSS 1.91%Jun 4, 2020
- UnknownIncrease random used for encryptionCheck if you run itEPSS 0.37%Jun 4, 2020
- UnknownNew users can read all Nextcloud Deck data from previous user with same usernameCheck if you run itEPSS 1.34%Jun 3, 2020
- UnknownImproper access control allows injecting tasks into other users decksCheck if you run itEPSS 0.64%May 15, 2020
- UnknownCode injection possible with malformed Nextcloud Talk chat commandsCheck if you run itEPSS 1.67%Apr 20, 2020
- UnknownLimit contacts photo uploading to imagesCheck if you run itEPSS 0.79%Apr 16, 2020
- UnknownMissing permission check on resharing a boardCheck if you run itEPSS 1.03%Apr 8, 2020
- UnknownMail app not verifying TLS host of mail serversCheck if you run itEPSS 0.96%Mar 24, 2020
- UnknownXSS in Files PDF viewerCheck if you run itEPSS 1.14%Mar 18, 2020
- UnknownMissing ownership check on remote wipe endpointCheck if you run itEPSS 1.77%Mar 18, 2020
- UnknownCode injection in Nextcloud Desktop Client for macOSCheck if you run itEPSS 0.69%Feb 17, 2020
- UnknownSecure view shares can be downloaded by manipulating the URLCheck if you run itEPSS 1.54%Feb 7, 2020
- UnknownSSRF protection bypass in calendar subscriptionsCheck if you run itEPSS 1.40%Dec 12, 2019
- UnknownCVE-2019-15615 is listed by Bypass lock protection in Android app.Check if you run itEPSS 0.37%Dec 5, 2019
- UnknownWorkflow rules only check the file extension for the mimetype instead of the contentCheck if you run itEPSS 1.13%Dec 4, 2019
- UnknownMissing sanitization in iOS App allows XSSCheck if you run itEPSS 0.78%Nov 20, 2019
- UnknownLogin and token disclosure to other Nextcloud servicesCheck if you run itEPSS 1.08%Nov 12, 2019
- UnknownDuplicate setup of second factor allowedCheck if you run itEPSS 0.61%Oct 25, 2019
- UnknownFile-drop content is visible through the gallery appCheck if you run itEPSS 0.92%Oct 22, 2019