Vulnerability index

Browse CVEs

250 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Nextcloud Enterprise Server MEDIUM 5.3
CVE-2022-39329

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise Server pri…

Fix: 23.0.9 / 24.0.5+
Fix from $1,600 2022-10-27
Nextcloud MEDIUM 5.5
CVE-2022-39210

Nextcloud android is the official Android client for the Nextcloud home server platform. Internal paths to the Nextcloud Android app files are not pr…

Fix: 3.21.0+
Fix from $1,600 2022-09-17
Talk MEDIUM 5.3
CVE-2022-39212

Nextcloud Talk is an open source chat, video & audio calls client for the Nextcloud platform. In affected versions an attacker could see the last vid…

Fix: 13.0.8 / 14.0.4+
Fix from $1,600 2022-09-17
Nextcloud Enterprise Server MEDIUM 5.3
CVE-2022-39211

Nextcloud server is an open source personal cloud platform. In affected versions it was found that locally running webservices can be found and reque…

Fix: 22.2.10.4 / 23.0.8+
Fix from $1,600 2022-09-16
Nextcloud Enterprise Server HIGH 7.5
CVE-2022-36074

Nextcloud server is an open source personal cloud product. Affected versions of this package are vulnerable to Information Exposure which fails to st…

Fix: 22.2.11 / 23.0.7+
Fix from $1,950 2022-09-15
Talk MEDIUM 5.3
CVE-2022-35932

Nextcloud Talk is a video and audio conferencing app for Nextcloud. Prior to versions 12.2.7, 13.0.7, and 14.0.3, password protected conversations ar…

Fix: 12.2.7 / 13.0.7+
Fix from $1,600 2022-08-12
Mail CRITICAL 9.8
CVE-2022-31132

Nextcloud Mail is an email application for the nextcloud personal cloud product. Affected versions shipped with a CSS minifier on the path `./vendor/…

Fix: 1.12.8 / 1.13.6+
Fix from $2,300 2022-08-04
Nextcloud Server MEDIUM 5.3
CVE-2022-31118

Nextcloud server is an open source personal cloud solution. In affected versions an attacker could brute force to find if federated sharing is being …

Fix: 22.2.9 / 23.0.6+
Fix from $1,600 2022-08-04
Richdocuments MEDIUM 6.5
CVE-2022-31024

richdocuments is the repository for NextCloud Collabra, the app for Nextcloud Office collaboration. Prior to versions 6.0.0, 5.0.4, and 4.2.6, a user…

Fix: 4.2.6 / 5.0.4+
Fix from $1,600 2022-06-02
Talk MEDIUM 6.1
CVE-2022-24887

Nextcloud Talk is a video and audio conferencing app for Nextcloud, a self-hosted productivity platform. Prior to versions 11.3.4, 12.2.2, and 13.0.0…

Fix: 11.3.4 / 12.2.4+
Fix from $1,600 2022-04-27
Calendar CRITICAL 9.8
CVE-2022-24838EPSS 33%

Nextcloud Calendar is a calendar application for the nextcloud framework. SMTP Command Injection in Appointment Emails via Newlines: as newlines and …

Fix: 3.2.2+
Fix from $2,300 2022-04-11
Nextcloud Server MEDIUM 5.3
CVE-2021-41233

Nextcloud text is a collaborative document editing using Markdown built for the nextcloud server. Due to an issue with the Nextcloud Text application…

Fix: 20.0.14 / 21.0.6+
Fix from $1,600 2022-03-10
Nextcloud Server MEDIUM 6.5
CVE-2022-24741

Nextcloud server is an open source, self hosted cloud style services platform. In affected versions an attacker can cause a denial of service by uplo…

Fix: 21.0.8 / 22.2.4+
Fix from $1,600 2022-03-09
Talk MEDIUM 6.1
CVE-2021-41180

Nextcloud talk is a self hosting messaging service. In versions prior 12.1.2 an attacker is able to control the link of a geolocation preview in the …

Fix: 12.1.2+
Fix from $1,600 2022-03-08
Nextcloud Server MEDIUM 5.3
CVE-2021-41239

Nextcloud server is a self hosted system designed to provide cloud style services. In affected versions the User Status API did not consider the user…

Fix: 20.0.14 / 21.0.6+
Fix from $1,600 2022-03-08
Nextcloud MEDIUM 5.3
CVE-2021-41166

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. An issue in versions prior to 3.17.1 may lead to …

Fix: 3.17.1+
Fix from $1,600 2022-01-26
Nextcloud HIGH 7.5
CVE-2021-43863

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. The Nextcloud Android app uses content providers …

Fix: 3.18.1+
Fix from $1,950 2022-01-25
News HIGH 7.1
CVE-2021-41256

nextcloud news-android is an Android client for the Nextcloud news/feed reader app. In affected versions the Nextcloud News for Android app has a sec…

Fix: 0.9.9.63+
Fix from $1,950 2021-11-30
Talk MEDIUM 6.1
CVE-2021-39222

Nextcloud is an open-source, self-hosted productivity platform. The Nextcloud Talk application was vulnerable to a stored Cross-Site Scripting (XSS) …

Fix: 10.0.7 / 10.1.4+
Fix from $1,600 2021-11-15
Deck HIGH 8.1
CVE-2021-39225

Nextcloud is an open-source, self-hosted productivity platform. A missing permission check in Nextcloud Deck before 1.2.9, 1.4.5 and 1.5.3 allows ano…

Fix: 1.2.9 / 1.4.5+
Fix from $1,950 2021-10-25
Nextcloud Server HIGH 8.1
CVE-2021-41177

Nextcloud is an open-source, self-hosted productivity platform. Prior to versions 20.0.13, 21.0.5, and 22.2.0, Nextcloud Server did not implement a d…

Fix: 20.0.13 / 21.0.5+
Fix from $1,950 2021-10-25
Server MEDIUM 6.5
CVE-2021-41178

Nextcloud is an open-source, self-hosted productivity platform. Prior to versions 20.0.13, 21.0.5, and 22.2.0, a file traversal vulnerability makes a…

Fix: 20.0.13 / 21.0.5+
Fix from $1,600 2021-10-25
Server MEDIUM 6.5
CVE-2021-41179

Nextcloud is an open-source, self-hosted productivity platform. Prior to Nextcloud Server versions 20.0.13, 21.0.5, and 22.2.0, the Two-Factor Authen…

Fix: 20.0.13 / 21.0.5+
Fix from $1,600 2021-10-25
Richdocuments MEDIUM 5.3
CVE-2021-39223

Nextcloud is an open-source, self-hosted productivity platform. The Nextcloud Richdocuments application prior to versions 3.8.6 and 4.2.3 returned ve…

Fix: 3.8.6 / 4.2.3+
Fix from $1,600 2021-10-25
Officeonline MEDIUM 5.3
CVE-2021-39224

Nextcloud is an open-source, self-hosted productivity platform. The Nextcloud OfficeOnline application prior to version 1.1.1 returned verbatim excep…

Fix: 1.1.1+
Fix from $1,600 2021-10-25
Contacts MEDIUM 5.4
CVE-2021-39221

Nextcloud is an open-source, self-hosted productivity platform. The Nextcloud Contacts application prior to version 4.0.3 was vulnerable to a stored …

Fix: 4.0.3+
Fix from $1,600 2021-10-25
Nextcloud Server CRITICAL 9.8
CVE-2021-32802

Nextcloud server is an open source, self hosted personal cloud. Nextcloud supports rendering image previews for user provided file content. For some …

Fix: 20.0.12 / 21.0.4+
Fix from $2,300 2021-09-07
Nextcloud Server HIGH 8.1
CVE-2021-32800

Nextcloud server is an open source, self hosted personal cloud. In affected versions an attacker is able to bypass Two Factor Authentication in Nextc…

Fix: 20.0.12 / 21.0.4+
Fix from $1,950 2021-09-07
Nextcloud Server MEDIUM 5.5
CVE-2021-32801

Nextcloud server is an open source, self hosted personal cloud. In affected versions logging of exceptions may have resulted in logging potentially s…

Fix: 20.0.12 / 21.0.4+
Fix from $1,600 2021-09-07
Richdocuments HIGH 7.5
CVE-2021-37628

Nextcloud Richdocuments is an open source collaborative office suite. In affected versions the File Drop features ("Upload Only" public link shares i…

Fix: 3.8.4 / 4.2.1+
Fix from $1,950 2021-09-07