Vulnerability index

Browse CVEs

250 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Nextcloud Server HIGH 8.8
CVE-2023-28643

Nextcloud server is an open source home cloud implementation. In affected versions when a recipient receives 2 shares with the same name, while a mem…

Fix: 24.0.9 / 25.0.3+
Fix from $1,950 2023-03-30
Nextcloud Server HIGH 8.8
CVE-2023-28833

Nextcloud server is an open source home cloud implementation. In affected versions admins of a server were able to upload a logo or a favicon and to …

Fix: 23.0.14 / 24.0.10+
Fix from $1,950 2023-03-30
Nextcloud Server HIGH 7.5
CVE-2023-28644

Nextcloud server is an open source home cloud implementation. In releases of the 25.0.x branch before 25.0.3 an inefficient fetch operation may impac…

Fix: 25.0.3+
Fix from $1,950 2023-03-30
Nextcloud MEDIUM 6.8
CVE-2023-28647

Nextcloud iOS is an ios application used to interface with the nextcloud home cloud ecosystem. In versions prior to 4.7.0 when an attacker has physic…

Fix: 4.7.0+
Fix from $1,600 2023-03-30
Nextcloud Server HIGH 8.1
CVE-2023-25817

Nextcloud server is an open source, personal cloud implementation. In versions from 24.0.0 and before 24.0.9 a user could escalate their permissions …

Fix: 24.0.9+
Fix from $1,950 2023-03-27
Nextcloud Server HIGH 7.1
CVE-2023-25818

Nextcloud server is an open source, personal cloud implementation. In affected versions a malicious user could try to reset the password of another u…

Fix: 21.0.9.10 / 22.2.10.10+
Fix from $1,950 2023-03-27
Nextcloud Server HIGH 7.8
CVE-2023-25820

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Enterprise Server is the enterprise ve…

Fix: 21.0.9 / 22.2.10.10+
Fix from $1,950 2023-03-22
Nextcloud Server HIGH 7.5
CVE-2023-25821

Nextcloud is an Open Source private cloud software. Versions 24.0.4 and above, prior to 24.0.7, and 25.0.0 and above, prior to 25.0.1, contain Improp…

Fix: 24.0.7+
Fix from $1,950 2023-02-25
Nextcloud Server MEDIUM 6.5
CVE-2023-25816

Nextcloud is an Open Source private cloud software. Versions 25.0.0 and above, prior to 25.0.3, are subject to Uncontrolled Resource Consumption. A u…

Fix: 25.0.3+
Fix from $1,600 2023-02-25
Nextcloud Server HIGH 7.5
CVE-2023-25579

Nextcloud server is a self hosted home cloud product. In affected versions the `OC\Files\Node\Folder::getFullPath()` function was validating and norm…

Fix: 20.0.14 / 21.0.9+
Fix from $1,950 2023-02-22
Nextcloud Server MEDIUM 5.3
CVE-2023-25162

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior to 24.0.8 and 23.0.12 and Nex…

Fix: 23.0.12 / 24.0.8+
Fix from $1,600 2023-02-13
Mail MEDIUM 5.3
CVE-2023-25160

Nextcloud Mail is an email app for the Nextcloud home server platform. Prior to versions 2.2.1, 1.14.5, 1.12.9, and 1.11.8, an attacker can access th…

Fix: 1.11.8 / 1.12.9+
Fix from $1,600 2023-02-13
Nextcloud Server MEDIUM 5.3
CVE-2023-25161

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise Server pri…

Fix: 23.0.12 / 24.0.8+
Fix from $1,600 2023-02-13
Nextcloud Server MEDIUM 5.3
CVE-2023-25159

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Office is a document collaboration app…

Fix: 6.3.1+
Fix from $1,600 2023-02-13
Richdocuments MEDIUM 5.7
CVE-2023-25150

Nextcloud office/richdocuments is an office suit for the nextcloud server platform. In affected versions the Collabora integration can be tricked to …

Fix: 3.8.7 / 4.2.9+
Fix from $1,600 2023-02-08
Desktop MEDIUM 6.1
CVE-2023-23942

The Nextcloud Desktop Client is a tool to synchronize files from a Nextcloud Server with your computer. Versions prior to 3.6.3 are missing sanitisat…

Fix: 3.6.3+
Fix from $1,600 2023-02-06
Mail MEDIUM 6.5
CVE-2023-23944

Nextcloud mail is an email app for the nextcloud home server platform. In versions prior to 2.2.2 user's passwords were stored in cleartext in the da…

Fix: 2.2.2+
Fix from $1,600 2023-02-06
Deck MEDIUM 6.5
CVE-2023-22470

Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. A databas…

Fix: 1.6.5 / 1.7.3+
Fix from $1,600 2023-01-14
Desktop HIGH 8.8
CVE-2023-22472

Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. It is possible to m…

Patch available
Fix from $1,950 2023-01-09
Nextcloud Talk MEDIUM 6.5
CVE-2022-41971

Nextcould Talk android is a video and audio conferencing app for Nextcloud. Prior to versions 12.2.8, 13.0.10, 14.0.6, and 15.0.0, guests can continu…

Fix: 12.2.8 / 13.0.10+
Fix from $1,600 2022-12-01
Nextcloud Server MEDIUM 5.3
CVE-2022-41968

Nextcloud Server is an open source personal cloud server. Prior to versions 23.0.10 and 24.0.5, calendar name lengths are not validated before writin…

Fix: 23.0.10 / 24.0.5+
Fix from $1,600 2022-12-01
Nextcloud Server MEDIUM 5.3
CVE-2022-41970

Nextcloud Server is an open source personal cloud server. Prior to versions 24.0.7 and 25.0.1, disabled download shares still allow download through …

Fix: 24.0.7+
Fix from $1,600 2022-12-01
Desktop MEDIUM 6.1
CVE-2022-39333

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client applica…

Fix: 3.6.1+
Fix from $1,600 2022-11-25
Desktop MEDIUM 5.4
CVE-2022-39332

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client applica…

Fix: 3.6.1+
Fix from $1,600 2022-11-25
Nextcloud Enterprise Server MEDIUM 6.5
CVE-2022-39346

Nextcloud server is an open source personal cloud server. Affected versions of nextcloud server did not properly limit user display names which could…

Fix: 22.2.10 / 23.0.7+
Fix from $1,600 2022-11-25
Talk MEDIUM 5.5
CVE-2022-41926

Nextcould talk android is the android OS implementation of the nextcloud talk chat system. In affected versions the receiver is not protected by broa…

Fix: 14.1.0+
Fix from $1,600 2022-11-25
Desktop MEDIUM 5.4
CVE-2022-39331

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client applica…

Fix: 3.6.1+
Fix from $1,600 2022-11-25
Openid Connect User Backend MEDIUM 5.4
CVE-2022-39338

user_oidc is an OpenID Connect user backend for Nextcloud. Versions prior to 1.2.1 did not properly validate discovery urls which may lead to a store…

Fix: 1.2.1+
Fix from $1,600 2022-11-25
Desktop HIGH 7.8
CVE-2022-41882

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In version 3.6.0, if a user received a maliciou…

Patch available
Fix from $1,950 2022-11-11
Nextcloud Enterprise Server MEDIUM 6.5
CVE-2022-39364

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. In Nextcloud Server prior to versions 23.0.9 and 24.…

Fix: 22.2.10.5 / 23.0.9+
Fix from $1,600 2022-10-27