Vulnerability index

Browse CVEs

250 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Nextcloud Server MEDIUM 6.5
CVE-2017-0886

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an error in the application logic an authenticated adversar…

Fix: 9.0.55 / 10.0.2+
Fix from $1,600 2017-04-05
Nextcloud Server MEDIUM 6.4
CVE-2017-0883

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via OCS API issue. A permission related issue within the O…

Fix: after 9.0.54
Fix from $1,600 2017-04-05
Nextcloud Server MEDIUM 6.1
CVE-2016-9466

Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Reflected XSS in the Gallery application. The gallery app was not…

Fix: 9.0.6 / 9.1.2+
Fix from $1,600 2017-03-28
Nextcloud Server MEDIUM 5.4
CVE-2016-9465

Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Stored XSS in CardDAV image export. The CardDAV image export func…

Fix: 9.0.6 / 9.1.2+
Fix from $1,600 2017-03-28
Nextcloud Server MEDIUM 5.3
CVE-2016-9467

Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofing in the files app. The location bar in…

Fix: 9.0.6 / 9.0.54+
Fix from $1,600 2017-03-28
Nextcloud Server MEDIUM 5.3
CVE-2016-9468

Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofing in the dav app. The exception message…

Fix: 9.0.6 / 9.0.54+
Fix from $1,600 2017-03-28
Nextcloud Server HIGH 8.1
CVE-2016-9463

Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.1.2, 9.0.6, and 8.2.9 suffer from SMB User Authentication Bypass. Nextcloud/ownC…

Fix: 8.2.9 / 9.0.4+
Fix from $1,950 2017-03-28
Nextcloud Server MEDIUM 6.1
CVE-2016-9459

Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a log pollution vulnerability potentially leading to a local XSS. The…

Fix: 9.0.4 / 9.0.52+
Fix from $1,600 2017-03-28
Nextcloud MEDIUM 5.3
CVE-2016-9460

Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a content-spoofing attack in the files app. The location bar in the f…

Fix: after 9.0.51
Fix from $1,600 2017-03-28
Nextcloud Server MEDIUM 5.4
CVE-2016-7419

Cross-site scripting (XSS) vulnerability in share.js in the gallery application in ownCloud Server before 9.0.4 and Nextcloud Server before 9.0.52 al…

Fix: after 9.0.51
Fix from $1,600 2016-09-17