Browse CVEs

MEDIUM 5.3 CVE-2020-8278 Improper access control in Nextcloud Social app version 0.3.1 allowed to read posts of any user. Social No fix yet Fix from $1,6002020-11-19 MEDIUM 5.3 CVE-2020-8133 A wrong generation of the passphrase for the encrypted block in Nextcloud Server 19.0.1 allowed an attacker to overwrite blocks in a file. Nextcloud Server No fix yet Fix from $1,6002020-11-09 HIGH 8.0 CVE-2020-8182 Improper access control in Nextcloud Deck 0.8.0 allowed an attacker to reshare boards shared with them with more permissions than they had themselves. Deck No fix yet Fix from $1,9502020-10-05 MEDIUM 6.5 CVE-2020-8223 A logic error in Nextcloud Server 19.0.0 caused a privilege escalation allowing malicious users to reshare with higher permissions than they got assi… Nextcloud Server No fix yet Fix from $1,6002020-10-05 MEDIUM 5.3 CVE-2020-8228 A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times. Preferred Providers No fix yet Fix from $1,6002020-10-05 MEDIUM 5.3 CVE-2020-8202 Improper check of inputs in Nextcloud Preferred Providers app v1.6.0 allowed to perform a denial of service attack when using a very long password. Preferred Providers No fix yet Fix from $1,6002020-07-30 MEDIUM 6.1 CVE-2020-8120 A reflected Cross-Site Scripting vulnerability in Nextcloud Server 16.0.1 was discovered in the svg generation. Nextcloud Server No fix yet Fix from $1,6002020-02-04 MEDIUM 6.8 CVE-2019-5455 Bypassing lock protection exists in Nextcloud Android app 3.6.0 when creating a multi-account and aborting the process. Nextcloud No fix yet Fix from $1,6002019-07-30