Vulnerability index

Browse CVEs

250 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Nextcloud Server MEDIUM 6.8
CVE-2026-45810

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 31.0.0 to before 31.0.12, and 32.0.0 to before 32.0.3, …

Fix: 21.0.9.20 / 22.2.10.35+
Fix from $1,600 2026-06-01
Tables HIGH 8.2
CVE-2026-45545

Nextcloud is an open source content collaboration platform. From versions 0.7.0 to before 0.7.7, 0.8.0 to before 0.8.10, 0.9.0 to before 0.9.8, and 1…

Fix: 0.7.7 / 0.8.10+
Fix from $1,950 2026-06-01
Tables HIGH 7.1
CVE-2026-45722

Nextcloud is an open source content collaboration platform. From versions 0.9.0 to before 0.9.7, and 1.0.0 to before 1.0.2, a missing sanitization in…

Fix: 0.9.7 / 1.0.2+
Fix from $1,950 2026-06-01
Nextcloud Server MEDIUM 5.9
CVE-2026-45690

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, a…

Fix: 29.0.16.16 / 30.0.17.9+
Fix from $1,600 2026-06-01
Nextcloud Server MEDIUM 5.9
CVE-2026-45691

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, a…

Fix: 29.0.16.16 / 30.0.17.9+
Fix from $1,600 2026-06-01
Forms MEDIUM 5.3
CVE-2026-45543

Nextcloud is an open source content collaboration platform. From version 4.3.0 to before version 5.2.7, a removed collaborator retains unauthorized r…

Fix: 5.2.7+
Fix from $1,600 2026-06-01
User Oidc HIGH 8.8
CVE-2026-45284

Nextcloud is an open source content collaboration platform. From version 1.3.6 to before version 8.4.0, an improper check allowed users that where pr…

Fix: 8.4.0+
Fix from $1,950 2026-06-01
Nextcloud Server HIGH 8.1
CVE-2026-45281

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, w…

Fix: 21.0.9.23 / 22.2.10.39+
Fix from $1,950 2026-06-01
Nextcloud Server MEDIUM 6.5
CVE-2026-45282

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, a…

Fix: 27.1.11.5 / 28.0.14.17+
Fix from $1,600 2026-06-01
Nextcloud Server MEDIUM 6.4
CVE-2026-45285

Nextcloud is an open source content collaboration platform. From versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, when a user shares a …

Fix: 32.0.9 / 33.0.3+
Fix from $1,600 2026-06-01
Approval MEDIUM 6.5
CVE-2026-45275

Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, a privilege escalation vulnerability exists in the Approval app t…

Fix: 2.7.2+
Fix from $1,600 2026-06-01
Nextcloud Server MEDIUM 6.5
CVE-2026-45279

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 31.0.0 to before 31.0.14, and 32.0.0 to before 32.0.4, …

Fix: 28.0.14.15 / 29.0.17.12+
Fix from $1,600 2026-06-01
User Oidc MEDIUM 6.1
CVE-2026-45278

Nextcloud is an open source content collaboration platform. From version 6.1.0 to before version 8.2.2, an attacker can craft links that would redire…

Fix: 8.2.2+
Fix from $1,600 2026-06-01
Flow HIGH 8.8
CVE-2026-22683

Windmill versions 1.56.0 through 1.614.0 contain a missing authorization vulnerability that allows users with the Operator role to perform prohibited…

Fix: after 1.614.0
Fix from $1,950 2026-04-07
Contacts MEDIUM 5.4
CVE-2025-66554

Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing. Prior to 5.5.4, 6.0.6, and 7.2.5, a mal…

Fix: 5.5.4 / 6.0.6+
Fix from $1,600 2025-12-05
Deck MEDIUM 5.5
CVE-2025-66548

Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Prior to …

Fix: 1.12.7 / 1.14.4+
Fix from $1,600 2025-12-05
Mail MEDIUM 5.4
CVE-2025-66514

Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. Prior to 5.5.3, a stored HTML injection in the Mail app's message …

Fix: 5.5.3+
Fix from $1,600 2025-12-05
Tables MEDIUM 5.3
CVE-2025-66513

Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.9, 0.9.6, and 1.0.1, the information which table (numeric…

Fix: 0.8.9 / 0.9.6+
Fix from $1,600 2025-12-05
Calendar MEDIUM 5.7
CVE-2025-66550

Nextcloud Calendar is a calendar app for Nextcloud. Prior to 4.7.17 and 5.2.4, when a malicious user creates a calendar event with a crafted attachme…

Fix: 4.7.17 / 5.2.4+
Fix from $1,600 2025-12-05
Calendar MEDIUM 6.5
CVE-2025-66511

Nextcloud Calendar is a calendar app for Nextcloud. Prior to 6.0.3, the Calendar app generates participant tokens for meeting proposals using a hash …

Fix: 6.0.3+
Fix from $1,600 2025-12-05
Nextcloud Server MEDIUM 6.1
CVE-2025-66512

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Server Enterprise prior to 31.0.12 and 32.0.3, a missing sanitizatio…

Fix: 31.0.12 / 32.0.3+
Fix from $1,600 2025-12-05
Nextcloud Server MEDIUM 5.4
CVE-2025-59788

Cross-site scripting (XSS) vulnerability in a reachable files_pdfviewer example directory in Nextcloud with versions before 22.2.10.33, 23.0.12.29, 2…

Fix: 22.2.10.33 / 23.0.12.29+
Fix from $1,600 2025-12-04
Group Folders MEDIUM 6.5
CVE-2025-47793

Nextcloud Server is a self hosted personal cloud system, and the Nextcloud Groupfolders app provides admin-configured folders shared by everyone in a…

Fix: 16.0.11 / 17.0.5+
Fix from $1,600 2025-05-16
Desktop MEDIUM 6.1
CVE-2025-47792

Nextcloud Desktop is the desktop sync client for Nextcloud. In versions of Nextcloud Desktop prior to 3.15, 3rdparty applications already installed o…

Fix: 3.15.0+
Fix from $1,600 2025-05-16
Nextcloud Server MEDIUM 5.3
CVE-2025-47791

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server prior to 28.0.13, 29.0.10, and 30.0.3 and Nextcloud Enterprise Server pr…

Fix: 28.0.13 / 29.0.10+
Fix from $1,600 2025-05-16
Nextcloud Server MEDIUM 6.4
CVE-2025-47790

Nextcloud Server is a self hosted personal cloud system. Nextcloud Server prior to 29.0.15, 30.0.9, and 31.0.3 and Nextcloud Enterprise Server prior …

Fix: 26.0.13.15 / 27.1.11.15+
Fix from $1,600 2025-05-16
Mail HIGH 8.1
CVE-2024-52508

Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. When a user is trying to set up a mail account with an email addre…

Fix: 1.14.6 / 1.15.4+
Fix from $1,950 2024-11-15
Desktop HIGH 7.5
CVE-2024-52510

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. The Desktop client did not stop with an error b…

Fix: 3.14.2+
Fix from $1,950 2024-11-15
Tables MEDIUM 6.5
CVE-2024-52511

Nextcloud Tables allows users to to create tables with individual columns. By directly specifying the ID of a table or view, a malicious user could b…

Fix: 0.8.0+
Fix from $1,600 2024-11-15
User Oidc MEDIUM 6.1
CVE-2024-52512

user_oidc app is an OpenID Connect user backend for Nextcloud. A malicious user could send a malformed login link that would redirect the user to a p…

Fix: 6.1.0+
Fix from $1,600 2024-11-15