Vulnerability index

Browse CVEs

250 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Nextcloud Server HIGH 7.8
CVE-2023-39963

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 20.0.0 and prior to versions 20.0.14.15, 21.…

Fix: 20.0.14.15 / 21.0.9.13+
Fix from $1,950 2023-08-10
Nextcloud Server HIGH 7.7
CVE-2023-39962

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 19.0.0 and prior to versions 19.0.13.10, 20.…

Fix: 19.0.13.10 / 20.0.14.15+
Fix from $1,950 2023-08-10
Nextcloud Server MEDIUM 5.3
CVE-2023-39959

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.9, 26.0.4,…

Fix: 25.0.9 / 26.0.4+
Fix from $1,600 2023-08-10
Nextcloud Server MEDIUM 5.3
CVE-2023-39958

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 22.0.0 and prior to versions 22.2.10.13, 23.…

Fix: 22.2.10.14 / 23.0.12.9+
Fix from $1,600 2023-08-10
Talk HIGH 7.8
CVE-2023-39957

Nextcloud Talk Android allows users to place video and audio calls through Nextcloud on Android. Prior to version 17.0.0, an unprotected intend allow…

Fix: 17.0.0+
Fix from $1,950 2023-08-10
User Oidc HIGH 8.1
CVE-2023-39954

user_oidc provides the OIDC connect user backend for Nextcloud, an open-source cloud platform. Starting in version 1.0.0 and prior to version 1.3.3, …

Fix: 1.3.3+
Fix from $1,950 2023-08-10
Notes MEDIUM 6.1
CVE-2023-39955

Notes is a note-taking app for Nextcloud, an open-source cloud platform. Starting in version 4.4.0 and prior to version 4.8.0, when creating a note f…

Fix: 4.8.0+
Fix from $1,600 2023-08-10
Nextcloud Server MEDIUM 6.5
CVE-2023-39952

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 22.0.0 and prior to versions 22.2.10.13, 23.…

Fix: 22.2.10.13 / 23.0.12.8+
Fix from $1,600 2023-08-10
Nextcloud Server HIGH 8.8
CVE-2023-35928

Nextcloud Server is a space for data storage on Nextcloud, a self-hosted productivity playform. In NextCloud Server versions 25.0.0 until 25.0.7 and …

Fix: 19.0.13.9 / 20.0.14.14+
Fix from $1,950 2023-06-23
Nextcloud Server CRITICAL 9.1
CVE-2023-35172

NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. In NextCloud Server version…

Fix: 21.0.9.12 / 22.2.10.12+
Fix from $2,300 2023-06-23
Nextcloud Server HIGH 8.1
CVE-2023-35927

NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. In NextCloud Server version…

Fix: 19.0.13.9 / 20.0.14.14+
Fix from $1,950 2023-06-23
End To End Encryption MEDIUM 6.5
CVE-2023-35173

Nextcloud End-to-end encryption app provides all the necessary APIs to implement End-to-End encryption on the client side. By providing an invalid me…

Fix: 1.12.4+
Fix from $1,600 2023-06-23
Nextcloud Server MEDIUM 6.1
CVE-2023-35171

NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. Starting in version 26.0.0 …

Fix: 26.0.2+
Fix from $1,600 2023-06-23
Nextcloud Server HIGH 7.5
CVE-2023-32320

Nextcloud Server is a data storage system for Nextcloud, a self-hosted productivity platform. When multiple requests are sent in parallel, all of the…

Fix: 21.0.9.12 / 22.2.10.12+
Fix from $1,950 2023-06-22
Mail MEDIUM 5.3
CVE-2023-33184

Nextcloud Mail is a mail app in Nextcloud. A blind SSRF attack allowed to send GET requests to services running in the same web server. It is recomme…

Fix: 1.15.3 / 2.2.5+
Fix from $1,600 2023-05-27
Nextcloud Server MEDIUM 6.5
CVE-2023-32319

Nextcloud server is an open source personal cloud implementation. Missing brute-force protection on the WebDAV endpoints via the basic auth header al…

Fix: 24.0.11 / 25.0.5+
Fix from $1,600 2023-05-26
Cookbook HIGH 8.8
CVE-2023-31128

NextCloud Cookbook is a recipe library app. Prior to commit a46d9855 on the `master` branch and commit 489bb744 on the `main-0.9.x` branch, the `pull…

Fix: 0.9.19+
Fix from $1,950 2023-05-26
Nextcloud Server MEDIUM 6.7
CVE-2023-32318

Nextcloud server provides a home for data. A regression in the session handling between Nextcloud Server and the Nextcloud Text app prevented a corre…

Fix: 25.0.6+
Fix from $1,600 2023-05-26
User Oidc CRITICAL 9.8
CVE-2023-32074

user_oidc app is an OpenID Connect user backend for Nextcloud. Authentication can be broken/bypassed in user_oidc app. It is recommended that the Nex…

Fix: 1.3.2+
Fix from $2,300 2023-05-25
Nextcloud Server HIGH 7.5
CVE-2023-28847

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. In Nextcloud Server 24.0.0 prior to 24.0.11 and 25.0…

Fix: 23.0.12.6 / 24.0.11+
Fix from $1,950 2023-04-25
Nextcloud Files Automated Tagging HIGH 8.8
CVE-2023-30539

Nextcloud is a personal home server system. Depending on the set up tags and other workflows this issue can be used to limit access of others or bein…

Fix: 1.14.2 / 1.15.3+
Fix from $1,950 2023-04-17
Desktop MEDIUM 6.5
CVE-2023-29000

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.7.0, by trustin…

Fix: 3.7.0+
Fix from $1,600 2023-04-04
Desktop MEDIUM 6.4
CVE-2023-28999

Nextcloud is an open-source productivity platform. In Nextcloud Desktop client 3.0.0 until 3.8.0, Nextcloud Android app 3.13.0 until 3.25.0, and Next…

Fix: 3.8.0 / 3.25.0+
Fix from $1,600 2023-04-04
Desktop MEDIUM 6.5
CVE-2023-28997

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.6.5, a maliciou…

Fix: 3.6.5+
Fix from $1,600 2023-04-04
Desktop MEDIUM 6.1
CVE-2023-28998

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.6.5, a maliciou…

Fix: 3.6.5+
Fix from $1,600 2023-04-04
User Oidc MEDIUM 5.4
CVE-2023-28848

user_oidc is the OIDC connect user backend for Nextcloud, an open source collaboration platform. A vulnerability in versions 1.0.0 until 1.3.0 effect…

Fix: 1.3.0+
Fix from $1,600 2023-04-04
Richdocuments MEDIUM 6.5
CVE-2023-28645

Nextcloud richdocuments is a Nextcloud app integrating the office suit Collabora Online. In affected versions the secure view feature of the rich doc…

Fix: 6.3.2 / 7.0.2+
Fix from $1,600 2023-03-31
Nextcloud Server MEDIUM 6.5
CVE-2023-28844

Nextcloud server is an open source home cloud implementation. In affected versions users that should not be able to download a file can still downloa…

Fix: 24.0.10 / 25.0.4+
Fix from $1,600 2023-03-31
Nextcloud Server HIGH 7.5
CVE-2023-28835

Nextcloud server is an open source home cloud implementation. In affected versions the generated fallback password when creating a share was using a …

Fix: 23.0.14 / 24.0.10+
Fix from $1,950 2023-03-30
Nextcloud Server HIGH 8.8
CVE-2023-26482

Nextcloud server is an open source home cloud implementation. In affected versions a missing scope validation allowed users to create workflows which…

Fix: 20.0.14.12 / 21.0.9.10+
Fix from $1,950 2023-03-30