Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Mail
MEDIUM 5.7
Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. The Nextcloud mail app incorrectly allowed attaching shared files …
Nextcloud Server
HIGH 7.5
Nextcloud Server is a self hosted personal cloud system. Under certain conditions the password of a user was stored unencrypted in the session data. …
Nextcloud Server
MEDIUM 6.5
Nextcloud Server is a self hosted personal cloud system. Due to a pre-flighted HEAD request, the link reference provider could be tricked into downlo…
Nextcloud Server
MEDIUM 6.5
Nextcloud Server is a self hosted personal cloud system. After setting up a user or administrator defined external storage with fixed credentials, th…
Nextcloud Server
MEDIUM 5.3
Nextcloud Server is a self hosted personal cloud system. MD5 hashes were used to check background jobs for their uniqueness. This increased the chanc…
Nextcloud Server
HIGH 8.2
Nextcloud Server is a self hosted personal cloud system. The OAuth2 client secrets were stored in a recoverable way, so that an attacker that got acc…
Nextcloud Server
MEDIUM 5.9
Nextcloud Server is a self hosted personal cloud system. After storing "Global credentials" on the server, the API returns them and adds them into th…
Nextcloud Server
MEDIUM 5.4
Nextcloud Server is a self hosted personal cloud system. After an attacker got access to the session of a user or administrator, the attacker would b…
Nextcloud Server
MEDIUM 6.5
Nextcloud Server is a self hosted personal cloud system. After an admin enables the default-disabled SVG preview provider, a malicious user could upl…
Desktop
CRITICAL 9.1
In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may become world writable or world rea…
Desktop
HIGH 7.8
The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client fo…
Nextcloud Server
MEDIUM 5.4
Nextcloud Server is a self hosted personal cloud system. A malicious user was able to send delete requests for old versions of files they only got sh…
Nextcloud Server
HIGH 8.1
Nextcloud Server is a self hosted personal cloud system. A recipient of a share with read&share permissions could reshare the item with more permissi…
Nextcloud Server
HIGH 7.5
Nextcloud server is a self hosted personal cloud system. Under some circumstance it was possible to bypass the second factor of 2FA after successfull…
User Oidc
MEDIUM 6.3
user_oidc app is an OpenID Connect user backend for Nextcloud. Missing access control on the ID4me endpoint allows an attacker to register an account…
Nextcloudpi
CRITICAL 9.8
NextcloudPi is a ready to use image for Virtual Machines, Raspberry Pi, Odroid HC1, Rock64 and other boards. A command injection vulnerability in Nex…
Guests
MEDIUM 5.4
Nextcloud guests app is a utility to create guest users which can only see files shared with them. In affected versions users were able to load the f…
Sso \& Saml Authentication
MEDIUM 6.1
Nextcloud User Saml is an app for authenticating Nextcloud users using SAML. In affected versions users can be given a link to the Nextcloud server a…
Deck
MEDIUM 5.4
Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. In affected version…
Global Site Selector
CRITICAL 9.8
Nextcloud Global Site Selector is a tool which allows you to run multiple small Nextcloud instances and redirect users to the right server. A problem…
Nextcloud Server
CRITICAL 9.8
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versions 26.0.9 and 27.1.4; as well…
Nextcloud Server
MEDIUM 5.4
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versions 26.0.9 and 27.1.4; as well…
Calendar
MEDIUM 6.5
Nextcloud/Cloud is a calendar app for Nextcloud. An attacker can gain access to stacktrace and internal paths of the server when generating an except…
Nextcloud Server
CRITICAL 9.8
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6…
Mail
CRITICAL 9.8
Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. Starting in version 1.13.0 and prior to version 2.2.8 and 3.3.0, a…
Nextcloud Server
MEDIUM 5.4
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8…
Nextcloud Server
MEDIUM 5.4
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8…
Nextcloud Server
HIGH 7.1
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8…
Nextcloud Server
HIGH 8.8
Nextcloud server is an open source home cloud platform. Affected versions of Nextcloud stored OAuth2 tokens in plaintext which allows an attacker who…
Nextcloud Server
HIGH 7.5
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server starting with 25.0.0 and prior to 25.09 and …